+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Auxiliary (https://hackforums.net/forumdisplay.php?fid=453)
+---- Forum: Buyers Bay (https://hackforums.net/forumdisplay.php?fid=44)
+---- Thread: [App] FaceNiff, sniff cookies with your Android device! (/showthread.php?tid=1344921)
FaceNiff, sniff cookies with your Android device! - BlueYoshi - Jun 2, 2011
Quote:FaceNiff Android is a tool that allows you to sniff and intercept of the web session profiles that use the WiFi and with which phone is connected. E 'can hijack sessions only when not using WiFi EAP , but should work on all private networks (Open/WEP/WPA-PSK/WPA2-PSK). From the name of the application, it is clear that it is marketed as a specific Facebook application for Android. Unlike Firesheep , you can divert only 3 profiles. If you wanted to hijack multiple profiles, the application becomes a fee.
Quote:The application also requires a device with root privileges, but it seems compatible with a lot of mobile devices
Video demonstration:
The program has been testen on:
- Facebook
- Twitter
- YouTube
- and Amazon
Tested on these devices:
- HTC Desire [CM7]
- Original Droid / Milestone [CM7]
- Xperia X10
- Samsung Galaxy S
- Nexsus 1 [CM7]
- HD2
- LG Swift 2X
- LG Optimus Black
- LG Optimus 3D
- and Samsung Infused
Download Faceniff-1.9.2.apk!
* - SIM-747559 - Jun 5, 2011
just found out about this today and it seems pretty cool! my local network is very secure but it still works! Once i am done testing im going to remove the vulnerability but would work awesome at coffee shops. btw if you kno firesheep it is basically the same thing. :)
* - Haters Ganna Hate - Jun 6, 2011
8 posts? I think its a trap tbh but ill see from the reviews
* - AndroidFan420 - Jul 6, 2011
i use faceniff but the other day i logged on it into my negbhors facebook or so i thought an im lookin at mine s.o.b aint that some shit?
could that be some sort of mistake or are they now getn me?
and it works on the huawei ascend m860
* - AndroidFan420 - Jul 6, 2011
sry dbl post now i need 25 charicters whoo hoo
* - sexysam - Jul 13, 2011
Works fine on LG Optimus One too.
Depending sometimes need to be passive sometimes stealth. Probably due to WPA/WEP/No security.
* - asad1912 - Jul 17, 2011
@mastermrz
naw...its not a trap...
although im a newb too
but i actually have this...
down side
requires Root :'(
* - cromwell600 - Jul 26, 2011
After I had noticed this program, I went to McDonalds, and tried it. :D I was wondering how many people don't take care about security. :D
* - El_Zilcho666 - Jul 26, 2011
(Jul 26, 2011 07:01 AM)Z3RO C00L Wrote: could this be converted to work on nokia n900 running maemo ???Well it is just simply arp spoofing and session hijacking.
I whipped up a similar script that runs on linux (as long as you have arpspoof and a few other utilities installed) in about an hour for demonstration purposes.
* - sexysam - Jul 28, 2011
(Jul 26, 2011 08:32 PM)El_Zilcho666 Wrote: Well it is just simply arp spoofing and session hijacking.
I whipped up a similar script that runs on linux (as long as you have arpspoof and a few other utilities installed) in about an hour for demonstration purposes.
I've ordered a N900 from a friend in Finland and should get it soon but it's a better "hacking" tool than facesniff!!!
"Backtrack" is working on N900, all the aircrack, ssh, arp spoof, ... name it, they almost all works!
* - jaredsk74 - Jul 28, 2011
Tested this out on my Thunderbolt and Xoom, works perfect on both devices. Website is HERE.
* - methodbeat - Jul 31, 2011
(Jul 26, 2011 07:01 AM)Z3RO C00L Wrote: could this be converted to work on nokia n900 running maemo ???
i've a nokia n900 and i've got gingerbread (2.3.3) on emmc
the app does install and works just till getting the usernames of people.
when i try to open them in web browser, just fails and redirects me to the facebook mobile login page.
(Jul 28, 2011 05:05 AM)sexysam Wrote: I've ordered a N900 from a friend in Finland and should get it soon but it's a better "hacking" tool than facesniff!!!forgot to add Kismet, also works.
"Backtrack" is working on N900, all the aircrack, ssh, arp spoof, ... name it, they almost all works!
and recently air-crack-ng got an update for maemo client :D
i agree, n900 is the best device ever made for people like us xD
* - Rage Against The Machine - Aug 12, 2011
this works on Optimus M also is there a way to also extract their password while the session is goin on?
* - vytor - Aug 16, 2011
Loaded on galaxy s phone and right away pulled a session cookie. Had to clear my cookies out so would not auto login to my account. This is what was probably happening to the poster that got on the neighbors and found himself. Nice app. Unlocked it and cant wait for updates!
* - kompton01 - Aug 18, 2011
works on htc hero also just a little slower