Firesheep

Firesheep, Force-TLS, KB SSl Enforcer. I am playing* with them. Which is to say, installed TLS and KB, still trying to get Firesheep to run on ubuntu. Might boot into windows soon so I can play with them there.

News: http://techcrunch.com/2010/10/24/firesheep-in-wolves-clothing-app-lets-you-hack-into-twitter-facebook-accounts-easily/

Force-TLS (for Firefox): https://addons.mozilla.org/en-US/firefox/addon/12714/

KB SSL Enforcer (for Chrome): https://chrome.google.com/extensions/detail/flcpelgcagfhfoegekianiofphddckof

Code for KB: http://kbsslenforcer.googlecode.com/svn/trunk/

Firesheep: http://codebutler.com/firesheep

Further on the topic of packet capture... my main interest is security (whitehat), and I like playing with the toys. I hope to make my own toys someday- maybe even someday soon.

Thought- how does firesheep deal with login via openid?

linux

http://www.tcpdump.org/

sudo tcpdump -A -i en1 tcp port 80
http://www.blogher.com/frame.php?url=http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/

Wireshark (I installed it on my Windows partition just now)

http://portforward.com/networking/wireshark.htm

http://wiki.wireshark.org/

Also, a link from the illustrious https://twitter.com/#!/LaMenta3

http://www.metageek.net/products/inssider

For firefox 4 protection: https://addons.mozilla.org/en-US/firefox/addon/246797/

My fav blogpost on it so far http://hossgifford.com/firesheep/

*And by playing I mean playing. I won't damage anyone's anything with this; I won't use someone's data for nefarious purposes. Yadda yadda.