{"id":2981,"date":"2010-10-28T10:06:16","date_gmt":"2010-10-28T09:06:16","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=2981"},"modified":"2017-09-22T14:49:21","modified_gmt":"2017-09-22T06:49:21","slug":"firesheep-social-network-session-stealinghijacking-tool","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2010\/10\/firesheep-social-network-session-stealinghijacking-tool\/","title":{"rendered":"Firesheep Download &#8211; Session Hijacking Tool For Windows"},"content":{"rendered":"<p>A huge wave has been made by this Firesheep in the mainstream media this week as it makes session hijacking a click and go procedure for Windows. It was released at Toorcon 12 and is simply a <a href=\"https:\/\/www.darknet.org.uk\/tag\/firefox\/\">Firefox<\/a> Add-on.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2010\/10\/Firesheep-Download-Session-Hijacking-Tool-For-Windows-640x437.png\" alt=\"Firesheep Download - Session Hijacking Tool For Windows\" width=\"640\" height=\"437\" class=\"aligncenter size-medium wp-image-4772\" \/><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<h2>What is Firesheep?<\/h2>\n<p>Stealing sessions\/passwords and so on is something we&#8217;ve been able to do for a LONG time using <a href=\"https:\/\/www.darknet.org.uk\/2009\/07\/wireshark-1-2-1-released-network-protocol-analyzer\/\">Wireshark<\/a> or Ettercap on a hub based or WiFi network running without encryption. But now with Firesheep anyone can do it, and they can do it VERY easily, which is somewhat scary. It is incredibly easy to use, download the add-on, login to a public WiFi spot and click a button&#8230;you&#8217;ll then be shown images and usernames of various people using networks such as  Facebook, Twitter, Flickr, bit.ly, Google and Amazon. With a double-click on their image, you&#8217;ll be logged in as them immediately.<\/p>\n<p>Firesheep is free and open source and works on Mac OS X and Windows with Linux support being promised soon. The download rate of this add-on is epic with over 320,000 downloads in 3 days.<\/p>\n<h3>How to Protect Against Firesheep?<\/h3>\n<p>I expect you already know how to protect yourself from this kind of attack, but if you don&#8217;t&#8230;use a <a href=\"https:\/\/stacksocial.com\/sales\/lifetime-of-purevpn?aid=a-9gnbnwzh\" rel=\"nofollow\">high-quality VPN like PureVPN<\/a> whenever you are on a public Wifi spot! If you don&#8217;t have VPN access or can&#8217;t be arsed to set one up just make sure you force SSL\/TLS on every site you surf &#8211; but do note to protect against this attack, you have to encrypt the entire session and not just the initial authentication.<\/p>\n<p>Google has a secure search option too here &#8211; <a href=\"https:\/\/encrypted.google.com\/\">https:\/\/encrypted.google.com\/<\/a><\/p>\n<p>You can find the slides from the Toorcon 12 presentation here:<\/p>\n<p><a href=\"http:\/\/codebutler.github.com\/firesheep\/tc12\">Hey Web 2.0: Start protecting user privacy instead of pretending to<\/a><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<h3>Firesheep Session Hijacking Requirements<\/h3>\n<p>Windows users are required to install <a href=\"https:\/\/www.winpcap.org\/install\/default.htm\">WinPcap<\/a>.<\/p>\n<h2>Download Firesheep to Hack Facebook<\/h2>\n<p>You can download Firesheep v0.1 here:<\/p>\n<p><a href=\"https:\/\/github.com\/downloads\/codebutler\/firesheep\/firesheep-0.1-1.xpi\">firesheep-0.1-1.xpi<\/a><\/p>\n<p>Or read more <a href=\"http:\/\/codebutler.com\/firesheep\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A huge wave has been made by this Firesheep in the mainstream media this week as it makes session hijacking a click and go procedure for Windows. It was released at Toorcon 12 and is simply a Firefox Add-on. What is Firesheep? Stealing sessions\/passwords and so on is something we&#8217;ve been able to do for [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"A huge wave has been made by this Firesheep in the mainstream media this week as it makes session hijacking a click and go procedure for Windows.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[9],"tags":[3874,138,3506],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/2981"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=2981"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/2981\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=2981"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=2981"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=2981"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}