added session hijacking tool