Friday, June 22, 2012

DroidSheep: Android tool for session hijacking

DroidSheep is a simple Android tool for web session hijacking (sidejacking).

Image source: Article
The tool listens for HTTP packets sent via a wireless (802.11) network connection and extracts the session id from these packets in order to reuse them.

The tool's main intention is to demonstrate how EASY it can be, to take over nearly any internet account.

Read the full article and watch the video to see how it works.

No comments: