FaceNiff is an Android application that lets users sniff and intercept web session profiles over Wi-Fi networks, stealing other users’ credentials from Facebook, Twitter and other services.

FaceNiff essentially turns your Android phone into a packet sniffer, and when the app detects Facebook traffic from another device on the same wireless network, it’ll snag as much information from the connection as possible–including your login information. Facebook isn’t the only service that FaceNiff can exploit–the app also allows users to intercept Twitter, YouTube, and Amazon credentials. The only prerequisite for FaceNiff is a rooted Android phone. Once installed, the app will tear through the Wi-Fi network for any accounts that are logged in. Protected networks aren’t safe from this, as FaceNiff can access WEP, WPA, and WPA2 Wi-Fi networks.

The developer put a disclaimer at the top of the FaceNiff site. “Legal notice: this application is for educational purposes only. Do not try to use it if it’s not legal in your country.”

Download FaceNiff APK now.