Which technique is a type of man-in-the-middle attack used to hijack HTTPS sessions?

Which technique is a type of man-in-the-middle attack used to hijack HTTPS sessions?

• A. TCP/IP hijacking
• B. DroidSheep
• C. RST hijacking
• D. Session Donation Attack

Answer: (A)

TCP/IP hijacking is about taking control of an existing TCP connection between the client and the server, placing the attacker in the middle of the communication. By spoofing packets and manipulating sequence numbers (or by resetting and resuming the connection), the attacker can impersonate one side and inject or alter traffic as it flows. This is the fundamental way a man-in-the-middle can hijack an HTTPS session: the attacker disrupts or usurps the TCP session so that data passes through them, allowing interception, tampering, or impersonation. While TLS aims to protect the content, controlling the underlying TCP stream is the classic method that makes a MITM feasible in the first place. Other options refer to specific tools or different attack techniques, but they don’t describe the core method of hijacking the transport-layer session itself.

TCP/IP hijacking is about taking control of an existing TCP connection between the client and the server, placing the attacker in the middle of the communication. By spoofing packets and manipulating sequence numbers (or by resetting and resuming the connection), the attacker can impersonate one side and inject or alter traffic as it flows. This is the fundamental way a man-in-the-middle can hijack an HTTPS session: the attacker disrupts or usurps the TCP session so that data passes through them, allowing interception, tampering, or impersonation. While TLS aims to protect the content, controlling the underlying TCP stream is the classic method that makes a MITM feasible in the first place. Other options refer to specific tools or different attack techniques, but they don’t describe the core method of hijacking the transport-layer session itself.