Authentication Cookies used by Facebook : The cookie which facebook uses to authenticate it's users is called "Datr" , If an attacker can get hold of your authentication cookies, All he needs to do is to inject those cookies in his browser and he will gain access to your account. This is how a facebook authentication cookie looks like: datr=1276721606-b7f94f977295759399293c5b0767618dc02111ede159a827030fc; An attacker may use variety of methods in order to steal your facebook authentication cookies depending upon the network he is on, If an attacker is on a hub based network he would just sniff traffic with any ***Packet Sniffer*** and gain access to victims account. If an attacker is on a Switch based network he would use an ***ARP Poisoning*** request to capture authentication cookies, If an attacker is on a wireless network he uses a tool called ***FIRESHEEP*** in order to capture authentication cookie and gain access ...
Comments
Post a Comment
write your comment here........