4 ms·
Firesheep only requires that you sniff unencrypted traffic but this requires that you make DNS requests resolve to an address of your choice. The latter is much
by mustpax 16y ago
Firesheep only requires that you sniff unencrypted traffic but this requires that you make DNS requests resolve to an address of your choice. The latter is much harder to do. You either need to control the wireless router or break the DNS server some way.
- tomjen3 16y agoTrue but not that much - it wouldn't be difficult to inject a reply on an unencrypted wireless network, you just have to sniff the trafic and then reply faster than the wireless network and then blast the reply out with a higher signal. Since everything is cached locally for your, replying faster shouldn't be an issue, and you can sit closer to your intented victim than the wireless router, which should give you a better signal.
- watty 16y agoThere are tools to simplify this by Arp Spoofing. http://en.wikipedia.org/wiki/ARP_spoofing http://en.wikipedia.org/wiki/ARP_spoofing
- dguido 16y agoOther methods that are mentioned: Internal network access: - Internal DNS access - ARP spoofing - DNS Cache Poisoning - DHCP spoofing - TCP hijacking - Wi-Fi Access Point impersonation External network access: - Internal DNS access - DNS Cache Poisoning