Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Firesheep came out on the scene in 2010 and rocked the world... and never made it to version 1.0. Mozilla has since released 15 major versions of Firefox and is incompatible with the extension. Is there a version that works with the latest Firefox or is one the 1000 forks on GitHub considered the successor to Firesheep?

share|improve this question
3  
What is Firesheep? –  Oliver Salzburg Aug 19 '12 at 23:13
1  
bear in mind a lot of the security holes firesheep exposed on popular sites have since been closed. –  Sirex Aug 20 '12 at 0:05
4  
@oliver. Firesheep was a way to really easily (as in point and click) hijack other peoples website sessions on things like facebook because the websites only ssl encrypted the login phase. It made alot of noise in the news due to people using it on public wifi hotspots. Many sites have since either began using ssl for everything by default or by a user-set option. –  Sirex Aug 20 '12 at 0:08
3  
@Sirex is correct. And StackExchange, sadly, is not yet one of those sites that have switched to full SSL. –  Iszi Aug 20 '12 at 3:26
    
The modern equivalent is to use HTTPS in the first place. Other than that you'll not need Firesheep for using Firefox... –  Tom Wijsman Sep 30 '12 at 15:45

3 Answers 3

Cookie Cadger, being developed by a colleague of mine. Terrifying Java app that steals cookies from a large number of apps:

http://igniteshow.com/videos/cookie-monster-unnoticed-threat-open-wi-fi

Edit: Available now at https://www.cookiecadger.com/

share|improve this answer
    
I would guess that making this a Java app in the current context makes it even easier to steal information. –  Gnoupi Aug 30 '12 at 13:26

To my understanding, all that Firesheep did was sniff out unsecured packets and pulled the information from there. Unfortunately there isn't a replacement extension (to my knowledge), but there are other options.

Wireshark does exactly this. I'm not as well versed in it's proper usage as I'd like to be, but there are many guides out there that can help you utilize it's functionality.

share|improve this answer

There is also DroidSheep for Android (requires root). The source is also available.

share|improve this answer
    
driodsheep is used to get the password of a wpa wpa2 wifi connection not to get passwords for website log-ins i'm sure some of the base code could be used to make an adaptation to firesheep if someone was feeling froggie though –  tinkeringgnome Jul 14 at 3:49
    
@tinkeringgnome: What are you talking about? Neither Firesheep nor Droidsheep get WPA Wi-Fi passwords. They "just" intercept cookies from HTTP connections. –  Denilson Sá Jul 14 at 19:05

protected by Community Oct 23 at 15:38

Thank you for your interest in this question. Because it has attracted low-quality answers, posting an answer now requires 10 reputation on this site.

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.