Recent in Hacking Tools:
- The Backdoor Factory (BDF) – Patch Binaries With Shellcode
- Gdog – Python Windows Backdoor With Gmail Command & Control
- SPF (SpeedPhish Framework) – E-mail Phishing Toolkit

Related Posts:

Most Read in Hacking Tools:
- Top 15 Security/Hacking Tools & Utilities - 1,973,203 views
- Brutus Password Cracker – Download brutus-aet2.zip AET2 - 1,400,279 views
- wwwhack 1.9 – Download wwwhack19.zip Web Hacking Tool - 675,850 views

Malwarebytes Anti-Exploit Premium | 1 Year 1 PC for $24.95


10 Responses to Firesheep – Social Network Session Stealing/Hijacking Tool

  1. Bogwitch October 28, 2010 at 12:08 pm #

    There is no new technology in use here, it is merely a tool to allow less technologically able users to see what the rest of us have been able to see for years.

    It is raising an awareness of the need for ssl sessions for any restricted access web sites which can only be a good thing but there’s so much more than captured from unsecured network transmission mediums and users should be made aware of that, too.

    As an aside, I would hate to be in the position of providing software like this – 100,000 users, 99% of whom will have NO idea if their NIC is capable of entering monitor/promisc mode and will automatically blame the software.

    • Darknet October 29, 2010 at 7:13 am #

      Yup, like I said at the beginning of the article – the only difference is this just makes it ridiculously easy. Heh honestly I don’t think the author gives a shit about supporting the users, it’s about proving a point more than anything else.

  2. Hex November 1, 2010 at 3:16 pm #

    I am still waiting on the Linux variant, hopefully out soon, so I can demonstrate this tool to people as awareness-raising. people dont ‘get’ wireshark dumps, but a mass-frape in the University would REALLY make the lesson STICK. Naturally, I would only target friends who are already pre-warned, and not frighten the life out of poor randoms.

    Is there any easy way to ‘see’ if someone is using this on the network you are on?
    Like a firesheep detector tool?

    • Darknet November 3, 2010 at 5:20 am #

      Yah if you pull all the packets off the network you should be able to figure it out, there’s no ‘tool’ for that though.

  3. Graham November 3, 2010 at 4:20 am #

    Bogwitch,

    The problem is the ease of access. Considering we are getting more mobile as a society, making it dumb simple to hack a wireless connection is not a good thing.

  4. Tom Smith November 3, 2010 at 6:31 pm #

    Combined with sslstrip it would be a scary tool. On the other hand… a HTTP notifier (addon or extension) on HTTPS sites would be a good idea.

  5. Steve King November 25, 2010 at 5:11 pm #

    For windows system, I have yet to find a laptop (running WinXP or Win7) that would support promiscuous mode on their wifi nic (Intel wifi nic). Is this true?

    • Darknet November 27, 2010 at 9:34 am #

      Most likely yah, pretty rare to find Windows machines (and off the shelf laptop WiFi cards) that can go promiscuous.

      • Steve King November 28, 2010 at 4:53 pm #

        We know firesheep is not available for Linux machine (so far) and Windows machine rarely can do promiscuous mode, then what is the risk level?
        BTW, does anyone know of development of firesheep-like feature under Linux?

        • Bogwitch November 30, 2010 at 9:46 am #

          For my pentesting laptop, I located a suitable card that would run promiscuous mode – but I also drilled a hole in the side of the laptop to fit a jack for a directional antenna and as you say, they are not standard cards.
          As for running a similar software for Linux, perhaps tcpdump? ;P