Caido

Caido is a tool used to launch Man-in-the-Middle (MitM) attacks, particularly on HTTP(S) traffic. In the context of session hijacking, Caido can be used to intercept the session tokens (like cookies or session IDs) sent between the client and server over an unencrypted connection or a weakly encrypted one (e.g., HTTP instead of HTTPS). The attacker can extract these session tokens and use them to impersonate the victim's session, hijacking access to the target web application.