Detecting Firesheep

The report analyzes Firesheep, a Firefox extension that sidejacks unencrypted HTTP session cookies on shared networks, and demonstrates a one-packet detection method using Scapy to inject fake Facebook cookies which cause Firesheep to attempt a session scrape; the author shows Wireshark captures of the resulting traffic and recommends mitigation such as using VPN/HTTPS and avoiding authentication on public Wi‑Fi.