FaceNiff is an Android application that allows you to smell and intercept profiles of web session through the WiFi that your mobile phone is connected to. It is possible to hijack sessions only when WiFi is not using EAP, but it should work on any private networks (open/WEP/WPA-PSK/WPA2-PSK)
- Android version 5.0 and above
- Root required
How to download and use?
Now, tap on the top left button “Offline” to make it “Online“. Then tap on the “START” button
The FaceNiff will start to display the unencrypted sessions see the below image