Firesheep: Easy HTTP session hijacking from within Firefox

I thought the title of this submission was slightly misleading. This is not a security vulnerability from within Firefox, it's a Firefox plugin to reveal security vulnerabilities in a wide range of websites.

Re: Firesheep: Easy HTTP session hijacking from within Firefox

#6

Post by gasull » Mon, Oct 25, 2010, 1:21 AM UTC

I couldn't install it on FF 3.6.9 on Windows XP.

Re: Firesheep: Easy HTTP session hijacking from within Firefox

#7

Post by jawngee » Mon, Oct 25, 2010, 1:25 AM UTC

gasull wrote: post #6

I couldn't install it on FF 3.6.9 on Windows XP.

You need WinPCap installed. Just FYI.

Re: Firesheep: Easy HTTP session hijacking from within Firefox

#8

Post by EricButler » Mon, Oct 25, 2010, 1:26 AM UTC

gasull wrote: post #6

I couldn't install it on FF 3.6.9 on Windows XP.

What was the error?

Re: Firesheep: Easy HTTP session hijacking from within Firefox

#9

Post by cdine » Mon, Oct 25, 2010, 1:28 AM UTC

leftnode wrote: post #5

I thought the title of this submission was slightly misleading. This is not a security vulnerability from within Firefox, it's a Firefox plugin to reveal security vulnerabilities in a wide range of websites.

Sorry if it was misleading somehow, this is definitely not a vulnerability in Firefox. It's a Firefox extension that makes it easy to execute HTTP session hijacking attacks.

Re: Firesheep: Easy HTTP session hijacking from within Firefox

#10

Post by EricButler » Mon, Oct 25, 2010, 1:28 AM UTC

ianhawes wrote: post #4

This looks really cool. I can't wait to try this out. Very nice work, Eric.

Thanks! If you or anyone has any problems, email me (eric@codebutler.com) with the details.