Tweet
Blind hijacking describes a type of session hijacking in which the attacker cannot capture return traffic from the host connection. This means that the attackeris "blindly" injecting malicious or manipulative packets without seeing any confirmation of the desired effect through a packet capture. The attacker must attempt to predict the sequence numbers of the TCP packets traversing the network between the victim and what ever is on the other end of the established connection. The reason for this prediction goes back to the TCP three-way-handshake which has the function of synchronizing sequence numbers between two parties in the process of establishing a connection.