Skip to content
Switch branches/tags


THIS BRANCH IS A WORK-IN-PROGRESS! Use the 'stable' branch (requires Firefox 3.x) instead!

A Firefox extension that demonstrates HTTP session hijacking attacks.

Created by:



Start by grabbing the code using Git. If you're planning to contribute, fork the project on GitHub.

$ git clone
$ cd firesheep
$ git submodule update --init

See instructions for your platform below. When done, an xpi will be created inside the build directory. Load the extension into Firefox by dragging it into the Addons page.

Mac OS X

  1. Install build dependencies using Homebrew (brew install autoconf automake libtool boost).
  2. Run ./
  3. Run make!

Ubuntu Linux

  1. Install build dependencies (sudo apt-get install autoconf libtool libpcap-dev libboost-all-dev libudev-dev).
  2. Run ./ then make.


This has so far only been tested on Windows XP (32-bit), however the binaries work fine on Windows 7 too. If you can help simplify this process please let me know.

  1. You'll need Microsoft Visual Studio 2005. The express edition should work too, but this hasn't been tested. Newer versions of Visual Studio should also work, but the Makefiles might need a bit of tweaking. Patches in this area greatly appreciated.
  2. Install Cygwin, selecting the following packages: automake-1.11, gcc-g++.
  3. Install BoostPro. Choose Visual C++ 8.0 and Multithreaded debug, static runtime.
  4. Install WinPcap.
  5. From a Cygwin command prompt: Run ./ then run make!


A Firefox extension that demonstrates HTTP session hijacking attacks.




No releases published


No packages published