Câu 11: 312-50V13: Certified Ethical Hacker v13

Boney, a professional hacker, targets an organization for financial benefits. He performs an attack by sending his session ID using an MITM attack technique. Boney first obtains a valid session ID by logging into a service and later feeds the same session ID to the target employee. The session ID links the target employee to Boney’s account page without disclosing any information to the victim. When the target employee clicks on the link, all the sensitive payment details entered in a form are linked to Boney’s account. What is the attack performed by Boney in the above scenario?

1. A. Forbidden attack
2. B. CRIME attack
3. C. Session donation attack — đáp án hiện tại
4. D. Session fixation attack