Wi-Fi Hacking tool - Firesheep

Ximian

Just thought I'd post a warning about an add-on for Firefox called Firesheep. Firesheep allows an attacker to hijack connections for popular sites such as Amazon, Facebook, Twitter etc.. when using open Wi-Fi
Firesheep sniffs the cookies that are used for authentication.
This type of hijacking isn't new, but it's now easier with tools such as Firesheep.
To protect yourself against these types of attacks a VPN can be used or HTTPS forced for the whole session, not just the initial login like most sites do, another option is to force the use of TLS (instead of SSL) as explained here: http://techcrunch.com/2010/10/25/firesheep/

Some people have mentioned that running the Firefox add-on "No Script" and setting the options to always use HTTPS on specified sites is a *prevention as follows:

NoScript->Options->Advanced->HTTPS
Force the following sites to use secure (HTTPS) connections:
twitter.com
*.twitter.com
google.com
*.google.com
facebook.com
*.facebook.com
etc.....

*In the link below, it mentions that the above configuration does not help as some sites don't support a full SSL session, meaning there may be links on the site or Java code that refer back to plain HTTP, Facebook is one culprit:
http://www.digitalsociety.org/2010/10/even-forced-ssl-is-broken-for-facebook-google-twitter/

Additional information on Firesheep:
http://www.digitalsociety.org/2010/10/firesheep-will-permanently-scare-you-from-hotspots/

Lil306

I'm interested

Not in hacking others, but I like to hack around my own wifi thanks

busenbust

Lil306 wrote: »

I'm interested

Not in hacking others, but I like to hack around my own wifi thanks

:rotfl:Careful!!! Someone might get ideas

Ximian

Lil306 wrote: »

I'm interested

Not in hacking others, but I like to hack around my own wifi thanks

Enjoy You'd need an open Wi-Fi though. Like I mentioned above, it's nothing new really, it's just a case of stealing session cookies

Coveredinbees!!!!

Fight Firesheep with FireShepherd



http://www.downloadsquad.com/2010/10/29/fight-firesheep-with-fireshepherd/

mr_fishbulb

Ximian wrote: »

Enjoy You'd need an open Wi-Fi though. Like I mentioned above, it's nothing new really, it's just a case of stealing session cookies

Don't think it needs to be open, but you do need the network key.

Ximian

mr_fishbulb wrote: »

Don't think it needs to be open, but you do need the network key.

Agreed, if you're on the same Wi-Fi network you can snoop, but traffic is still encrypted making it harder to capture data but there are ways around this. Open Wi-Fi just makes it easier
I'll be testing this on a wired network later today

mr_fishbulb

Ximian wrote: »

Agreed, if you're on the same Wi-Fi network you can snoop, open Wi-Fi just makes it easier
I'll be testing this on a wired network later today

Wired will probably need arp spoofing. Ettercap does a good job if you're on a linux box. Someone posted a compiled firesheep xpi for Firefox on Ubuntu in this thread - http://github.com/codebutler/firesheep/pull/31

Haven't tried on a wired network using arp spoofing with cane & able. Might work.

Ximian

mr_fishbulb wrote: »

Wired will probably need arp spoofing. Ettercap does a good job if you're on a linux box. Someone posted a compiled firesheep xpi for Firefox on Ubuntu in this thread - http://github.com/codebutler/firesheep/pull/31

Haven't tried on a wired network using arp spoofing with cane & able. Might work.

That's what I was going to use, C&A, keep it simple for now.

Lil306

Firesheep, Fireshephard

Where's the cows and goats ?

busenbust

Lil306 wrote: »

Firesheep, Fireshephard

Where's the cows and goats ?

:rotfl:gates open ???