There is an extension where Firefox can actually be used to steel “cookies” from another computer by using the extension called Firesheep. It steels cookies from another computer via unsecured wifi networks and uses it to login to other peoples account without needing to input the username and password.
Normally, when logging into a website you usually start by submitting your username and password. The server then checks to see if an account matching this information exists and replies back with a “cookie” which is used by your browser.
This leaves the cookie (and the user) vulnerable to the hijack. HTTP session hijacking also called “sidejacking” is when an attacker gets a hold of a user’s cookie, allowing them to do anything the user can do on a particular website. On an open wireless network, cookies are basically shouted through the air, making these attacks extremely easy. For more info visit : http://codebutler.com/firesheep/
WARNING!!! for your safety, don’t connect to an unsecured wireless network. Have a look at the video below:
