Which Android app can sniff and intercept web session profiles over a Wi-Fi connection to a mobile and runs on rooted devices?

Which Android app can sniff and intercept web session profiles over a Wi-Fi connection to a mobile and runs on rooted devices?

• A. Sniffer Wicap
• B. Packet Capture
• C. FaceNiff
• D. Analytic plug-ins

Answer: (C)

The concept being tested is how session hijacking can occur on a mobile device over a Wi‑Fi network when an attacker can access sensitive browser data, a capability that is amplified on rooted devices. In this scenario, the tool in question is known for targeting web session tokens stored by browsers, enabling an attacker to sniff and reuse active sessions. FaceNiff is the one that historically fits this scenario because it’s described as capable of intercepting and stealing browser sessions by accessing cookies and session data on a rooted Android device when connected to a compromised or MITM-enabled Wi‑Fi network. Root access allows the app to read browser data stores, which is where session tokens or cookies reside, making it possible to hijack ongoing web sessions. The other options are more general network sniffers or do not specifically focus on harvesting browser session tokens. They may capture traffic or analyze packets but do not provide the targeted capability to extract session cookies from browsers on a rooted device. This distinction matters because the ability to grab and reuse web session profiles hinges on access to stored authentication tokens, something FaceNiff is historically described as providing in this context.

The concept being tested is how session hijacking can occur on a mobile device over a Wi‑Fi network when an attacker can access sensitive browser data, a capability that is amplified on rooted devices. In this scenario, the tool in question is known for targeting web session tokens stored by browsers, enabling an attacker to sniff and reuse active sessions.

FaceNiff is the one that historically fits this scenario because it’s described as capable of intercepting and stealing browser sessions by accessing cookies and session data on a rooted Android device when connected to a compromised or MITM-enabled Wi‑Fi network. Root access allows the app to read browser data stores, which is where session tokens or cookies reside, making it possible to hijack ongoing web sessions.

The other options are more general network sniffers or do not specifically focus on harvesting browser session tokens. They may capture traffic or analyze packets but do not provide the targeted capability to extract session cookies from browsers on a rooted device. This distinction matters because the ability to grab and reuse web session profiles hinges on access to stored authentication tokens, something FaceNiff is historically described as providing in this context.