Surf Jack – Cookie Session Stealing Tool

Your website & network are Hackable

A tool which allows one to hijack HTTP connections to steal cookies – even ones on HTTPS sites! Works on both Wifi (monitor mode) and Ethernet.


  • Does Wireless injection when the NIC is in monitor mode
  • Supports Ethernet
  • Support for WEP (when the NIC is in monitor mode)

Known issues:

  • Sometimes the victim is not redirected correctly (particularly seen when targeting Gmail)
  • Cannot stop the tool via a simple Control^C. This is a problem with the proxy


You can download Surf Jack here:

Or read more here.

Posted in: Hacking Tools, Web Hacking

, , , , , , , , ,

Recent in Hacking Tools:
- nishang – PowerShell For Penetration Testing
- DyMerge – Bruteforce Dictionary Merging Tool
- mitmproxy – Intercepting HTTP Proxy Tool aka MITM

Related Posts:

Most Read in Hacking Tools:
- Top 15 Security/Hacking Tools & Utilities - 1,995,243 views
- Brutus Password Cracker – Download AET2 - 1,489,693 views
- wwwhack 1.9 – Download Web Hacking Tool - 688,797 views

2 Responses to Surf Jack – Cookie Session Stealing Tool

  1. SpikyHead September 21, 2008 at 6:50 am #

    Well have used almost every tool based on Scapy and realy liked it. So should check this one out too..

    Moreover, It seems like a very useful tool…

  2. Goodpeople September 22, 2008 at 7:17 am #

    It’s fairly easy to program you way around threats like this. Just include the destination MAC address in the cookie when you send it out (encrypted of course) and check it against the originating MAC address while reading the cookie back in..