Fantastic Droid Sheep [Android]

Fantastic Droid Sheep is a simple Android tool for web session hijacking which is also called sidejacking. It listens for HTTP packets sent via a wireless (802.11) network connection and extracts the session id from these packets in order to reuse them.This application can capture sessions using the libpcap library and supports: Open networks, wep encrypted networks, WPA and WPA2 encrypted networks (PSK only).

As a matter of fact, Fantastic Droid Sheep is not intended to steal identities or endamage anybody, but to show the weak security of non-ssl webservices. Besides, this software uses libpcap and arpspoof. It is absolutely free for everyone now!

The followings are the features and functions of this app: To start with, as you open this app, you will see the disclaimer which suggests you use this software on your own risk, select the option and press the OK button to continue. In addition , this app can only run on phones having superuser access enabled , it seems to work unproperly since your phone is not rooted. According to the steps above, you are allowed to select the two options: ARP-Spoofing and Generic mode, and then be sure that your phone can get online, press the Start button to go ahead.

Let us see something interest about session hijacking from wikipedia: In computer science, session hijacking , which is also known as cookie hijacking , is the exploitation of a valid computer session(sometimes also called a session key) in order to gain unauthorized access to information or services in a computer system. Particularly, it is used to refer to the theft of a magic cookie used to authenticate a user to a remote server. It has particular relevance to web developers, since the HTTP cookies used to maintain a session on many web sites are able to be easily stolen by an attacker using an intermediary computer or with access to the saved cookies on the victim's computer.