DroidSheep is an Android application for simple web session hijacking (just like Firesheep or FaceNiff for Android). Once started, DroidSheep listenes for websessions within a wireless network. After a session has been captured, the user can tap the session in the list and surf in the hijacked account.
It can hijack NEARLY ALL WEBSERVICES!!
(If they do not use SSL/TLS connections)
As a new feature, DroidSheep can send cookie data via email and therefor requires email permission. (It will not read any email!).
Make sure to enable "Generic mode" -- see http://www.droidsheep.de for more information
NOTICE: PLEASE ASK FOR SUPPORT / FEATURES / ... ONLY ON THE DROIDSHEEP SUPPORT FORUM @ WWW.DROIDSHEEP.DE!
DroidSheep supports OPEN, WEP, WPA and WPA2 encrypted networks! (Even the wired clients sessions can be hijacked when using ARP-Spoofing)
REMEMBER: ROOT ACCESS NECESSARY!
DroidSheep is a research project. It is not intended to be used to harm any person. Be always aware of what you are doing – stealing someones identity can cause real trouble for him and for you.
There might be countries where the usage or the download of DroidSheep is not allowed by law. It´s up to you to ensure that.
I AM NOT RESPONSIBLE FOR ANY DAMAGE CAUSED BY THE SOFTWARE ITSELF OR ITS USAGE!
DroidSheep comes with absolutely no warranty.
DroidSheep is published under the GNU GPLv3. You can find more information about the sources on the website http://www.droidsheep.de
- Usage of iptables for much better compatibility and less network problems
- Debug-Mode for analyzing problems on some phones
- Bugfixes and Code-Cleanup
- German language support
ADDED TUTORIAL VIDEO TO www.droidsheep.de!
If you´d like to help to translate DroidSheep to your native language, send an email to [email protected]
Questions? Use the forum at www.droidsheep.de/forum
GMAIL-PERMISSION is used for exporting cookies via mail, NO PERSONAL DATA WILL BE CAPTURED SILENTLY!