Hi all-

Been still studying ethical hacking and at the same time learning some cool tools out there been fooling around with Ferret from Errata Security tools I used my own personal machines and my favorite card a Senao Wifi-b card and just to give you some of my experience it works but at the same time it is unstable you do have to restart it each time you don’t get any results one file is called Ferret and the other is Hamster, Ferret is the sniffer and Hamster will show you live session cookies, to me I did this logging into MySpace or Google and I was able to capture each session I guess that’s why the call it sidejacking or session highjacking but if you want to try this please don’t do this in a real environment  You could cause a Denial of Service.

Here are some links to read and the tool downloads.-->
http://www.bauer-power.net/2008/01/sidejacking-with-hamster-and-ferret.html

http://erratasec.blogspot.com/2007/08/sidejacking-with-hamster_05.html