Firesheep came out on the scene in 2010 and rocked the world... and never made it to version 1.0. Mozilla has since released 15 major versions of Firefox and is incompatible with the extension. Is there a version that works with the latest Firefox or is one the 1000 forks on GitHub considered the successor to Firesheep?

  • 3
    What is Firesheep? Aug 19, 2012 at 23:13
  • 2
    bear in mind a lot of the security holes firesheep exposed on popular sites have since been closed.
    – Sirex
    Aug 20, 2012 at 0:05
  • 6
    @oliver. Firesheep was a way to really easily (as in point and click) hijack other peoples website sessions on things like facebook because the websites only ssl encrypted the login phase. It made alot of noise in the news due to people using it on public wifi hotspots. Many sites have since either began using ssl for everything by default or by a user-set option.
    – Sirex
    Aug 20, 2012 at 0:08
  • 6
    @Sirex is correct. And StackExchange, sadly, is not yet one of those sites that have switched to full SSL.
    – Iszi
    Aug 20, 2012 at 3:26
  • The modern equivalent is to use HTTPS in the first place. Other than that you'll not need Firesheep for using Firefox... Sep 30, 2012 at 15:45

3 Answers 3


Cookie Cadger, being developed by a colleague of mine. Terrifying Java app that steals cookies from a large number of apps:


Edit: Available now at https://www.cookiecadger.com/

  • I would guess that making this a Java app in the current context makes it even easier to steal information.
    – Gnoupi
    Aug 30, 2012 at 13:26

To my understanding, all that Firesheep did was sniff out unsecured packets and pulled the information from there. Unfortunately there isn't a replacement extension (to my knowledge), but there are other options.

Wireshark does exactly this. I'm not as well versed in it's proper usage as I'd like to be, but there are many guides out there that can help you utilize it's functionality.


There is also DroidSheep for Android (requires root). The source is also available.

  • driodsheep is used to get the password of a wpa wpa2 wifi connection not to get passwords for website log-ins i'm sure some of the base code could be used to make an adaptation to firesheep if someone was feeling froggie though
    – user346038
    Jul 14, 2014 at 3:49
  • @tinkeringgnome: What are you talking about? Neither Firesheep nor Droidsheep get WPA Wi-Fi passwords. They "just" intercept cookies from HTTP connections. Jul 14, 2014 at 19:05

Not the answer you're looking for? Browse other questions tagged or ask your own question.