Glossary: Attacks and Indicators

cookie

Also written: session cookie

A small value a website stores in the browser to remember a logged-in user. XSS can steal it, CSRF takes advantage of the browser sending it automatically, and stealing it enables token theft.