CISSP All Domains Practice test 12

An attacker has been listening to our network traffic and has captured some passwords and session IDs. She is planning to use them in an attack in 2 days. What would the attack be using?