Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Firesheep came out on the scene in 2010 and rocked the world... and never made it to version 1.0. Mozilla has since released 15 major versions of Firefox and is incompatible with the extension. Is there a version that works with the latest Firefox or is one the 1000 forks on GitHub considered the successor to Firesheep?

share|improve this question
3  
What is Firesheep? –  Oliver Salzburg Aug 19 '12 at 23:13
1  
bear in mind a lot of the security holes firesheep exposed on popular sites have since been closed. –  Sirex Aug 20 '12 at 0:05
4  
@oliver. Firesheep was a way to really easily (as in point and click) hijack other peoples website sessions on things like facebook because the websites only ssl encrypted the login phase. It made alot of noise in the news due to people using it on public wifi hotspots. Many sites have since either began using ssl for everything by default or by a user-set option. –  Sirex Aug 20 '12 at 0:08
1  
@Sirex is correct. And StackExchange, sadly, is not yet one of those sites that have switched to full SSL. –  Iszi Aug 20 '12 at 3:26
    
The modern equivalent is to use HTTPS in the first place. Other than that you'll not need Firesheep for using Firefox... –  Tom Wijsman Sep 30 '12 at 15:45
add comment

2 Answers

Cookie Cadger, being developed by a colleague of mine. Terrifying Java app that steals cookies from a large number of apps:

http://igniteshow.com/videos/cookie-monster-unnoticed-threat-open-wi-fi

Edit: Available now at https://www.cookiecadger.com/

share|improve this answer
    
I would guess that making this a Java app in the current context makes it even easier to steal information. –  Gnoupi Aug 30 '12 at 13:26
add comment

To my understanding, all that Firesheep did was sniff out unsecured packets and pulled the information from there. Unfortunately there isn't a replacement extension (to my knowledge), but there are other options.

Wireshark does exactly this. I'm not as well versed in it's proper usage as I'd like to be, but there are many guides out there that can help you utilize it's functionality.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.