Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
A Firefox extension that demonstrates HTTP session hijacking attacks.
branch: master

This branch is 22 commits behind codebutler:master

Fetching latest commit…

Cannot retrieve the latest commit at this time

Failed to load latest commit information.
backend
scripts
xpi
.gitignore
.gitmodules
COPYING
Makefile.am
README.md
autogen.sh
boost.m4
configure.ac

README.md

Firesheep

THIS BRANCH IS A WORK-IN-PROGRESS! Use the 'stable' branch (requires Firefox 3.x) instead!

A Firefox extension that demonstrates HTTP session hijacking attacks.

Created by:

Contributors:

Building

Start by grabbing the code using Git. If you're planning to contribute, fork the project on GitHub.

$ git clone https://github.com/codebutler/firesheep.git
$ git submodule update --init

See instructions for your platform below. When done, an xpi will be created inside the build directory. Load the extension into Firefox by dragging it into the Addons page.

Mac OS X

  1. Install boost using Homebrew (brew install boost).
  2. Run ./autogen.sh
  3. Run make!

Ubuntu Linux (10.10 Maverick)

  1. Install build dependencies (sudo apt-get install autoconf libtool libpcap-dev libboost-all-dev libhal-dev).
  2. Run ./autogen.sh then make.

Windows

This has so far only been tested on Windows XP (32-bit), however the binaries work fine on Windows 7 too. If you can help simplify this process please let me know.

  1. You'll need Microsoft Visual Studio 2005. The express edition should work too, but this hasn't been tested. Newer versions of Visual Studio should also work, but the Makefiles might need a bit of tweaking. Patches in this area greatly appreciated.
  2. Install Cygwin, selecting the following packages: automake-1.11, gcc-g++.
  3. Install BoostPro. Choose Visual C++ 8.0 and Multithreaded debug, static runtime.
  4. Install WinPcap.
  5. From a Cygwin command prompt: Run ./autogen.sh) then run make!
Something went wrong with that request. Please try again.