session-hijacking

If we log out from a website then that login session is gone and we need to login again. On another side you can clear browser history and then need to login again to a website. Both methods result in same outcome which is that you need to login again, but there is one thing that's not quite...

For learning purpose, I'm trying to RST hijack my current session : 22:29:20.185032 IP 172.10.10.11.43086 > 172.10.10.21.http: Flags [ S ], seq 2173271328, win 29200, options [mss 1460,sackOK,TS val 3615590 ecr 0,nop,wscale 7], length 0 22:29:20.185090 IP 172.10.10.21.http > 172.10.10.11.43086...