I used ssh proxy to visit my gmail some days ago.
Firefox uses autoproxy that setting the proxy server 127.0.0.1 (port is the same as tunneling setting) and select socks5, then I run tunneling and connect ssh server.
When I open two tabs at the same time in firefox, one is gmail (https) and the other is the page on ssh server (to get the session).
Now my question: “Is it possible to do Session hijacking on the ssh server? (if I have access as "root" on the ssh server?