FireSheep and HTTP Session Hijacking Explained

This demo shows the powerful new security (hacking) tool called FireSheep and explains how it can be used to perform http session hijacking (sidejacking) attacks against you and steal your logged in sessions on popular websites. Please note this is not a security risk caused by FireSheep, the tool is just pointing out a flaw we have all been needing to deal with for some time, and also note that we don't think this can be fixed except by the web application developers and admins, and we do believe that this app and its author, Mr Eric Butler, may have changed the face of web application security forever. Note that we don't claim to be the world's foremost experts on the topic, but hopefully this video is helpful in understanding the threat. Also note that although the video was made on a mac, all client operating systems and all client browsers are affected.

Category:

Science & Technology

Tags:

• firesheep
• session
• hijacking
• http
• security
• encryption
• novcon
• attack
• sidejacking
• exploit
• hacki

[gveloper]

Thanks, we will check it out. And if anyone has any more ideas to mitigate this threat, please comment here or in our forums! Lets get the community talking.

[Hurvduperv]

SPEAK UP, BITCH!!

[PremiumZero]

Does this work on bank sites?

[Khanacademyr0cks]

Speak a bit louder U..!

[kaltoftmorten]

@PremiumZero No because they are always SSL-encrypted

[pspheaven]

@davidkris Sadly all you need is a tool called sslstrip and boom... no more ssl

[pspheaven]

@DTbox Your'e an idiot, firesheep works great, its legal, and the download is easy to get...

[masiewpao]

@DTbox your an idiot. or not.

[masiewpao]

@DTbox your an idiot.

[DTbox]

Ladies and gentlemen, I believe that you've been set up. Think about it, I.T. media outlets provided the download link and now suddenly Firesheep can't be found anywhere on the Internet for download or the download won't work. I know that successful downloads are being tracked, THERE IS NO SOFTWARE TO HACK SOCIAL NETWORKING SITES!!!!