Firesheep is a small firefox extension which is allowed to do HTTP session hijacking (sometimes called "sidejacking") is when an attacker gets a hold of a user's cookie, allowing them to do anything the user can do on a particular website. On an open wireless network, cookies are basically shouted through the air, making these attacks extremely easy.
This is a widely known problem today which can only fix by full end-to-end encryption,known on the web as HTTPS os SSL.
Use allways Hypertext Transfer Protocol Secure (HTTPS) or SSL (Secure Sockets Layer) for connecting to social networks such as FACEBOOK,TWITTER,ORKUT etc to avoid this hijacking.
Lets us see how to install firesheep and works
Soft Needed : Mozilla Firefox 3.6,Firesheep extension.
Step 1: Download firesheep extension
Step 2: Open the downloaded file with mozilla firefox
Step 3: Click install now
Step 4: Restart Firefox
Step 5: Click View-> sidebar -> firesheep and then enter.
you'll see a new sidebar. Connect to any busy open wifi network and click the big "Start Capturing" button. Then wait.
As soon as anyone on the network visits an insecure website known to Firesheep, their name and photo will be displayed:
Double-click on someone, and you're instantly logged in as them.
That's it .!!!
Firesheep is free, open source, and is available now for Mac OS X and Windows. Linux support is on the way.
This is a widely known problem today which can only fix by full end-to-end encryption,known on the web as HTTPS os SSL.
Use allways Hypertext Transfer Protocol Secure (HTTPS) or SSL (Secure Sockets Layer) for connecting to social networks such as FACEBOOK,TWITTER,ORKUT etc to avoid this hijacking.
Lets us see how to install firesheep and works
Soft Needed : Mozilla Firefox 3.6,Firesheep extension.
Step 1: Download firesheep extension
Step 2: Open the downloaded file with mozilla firefox
Step 3: Click install now
Step 4: Restart Firefox
Step 5: Click View-> sidebar -> firesheep and then enter.
you'll see a new sidebar. Connect to any busy open wifi network and click the big "Start Capturing" button. Then wait.
As soon as anyone on the network visits an insecure website known to Firesheep, their name and photo will be displayed:
Double-click on someone, and you're instantly logged in as them.
That's it .!!!
Firesheep is free, open source, and is available now for Mac OS X and Windows. Linux support is on the way.
No comments:
Post a Comment