wireshark capture packets from a website

Option 1: Connect to the disconnection between the user and the server and capture traffic at the time the connection is established (SSL Handshake). There are several options for answering this question. What if the traffic is encrypted and using HTTPS?

SMTP protocol and you will need to enter the following filter: = “AUTH”Īnd more serious utilities to decrypt the encoding protocol.

IMAP protocol and filter will be: imap.request contains “login”.

The POP protocol and filter looks like this: = “USER” || = “PASS”.

You can also learn passwords to user mailboxes using simple filters to display: Thus, using Wireshark, we can not only solve problems in the operation of applications and services, but also try ourselves as a hacker, intercepting passwords that users enter in web forms. I was given a list of coding protocols in order of priority:Īt this stage, we can use the hashcat utility:~ # hashcat -m 0 -a 0 /root/wireshark-hash.lf /root/rockyou.txtAt the output we got the decrypted password: simplepassword

We go, for example, to the site and enter our password into the window for identification. Password: e4b7c855be6e3d4307b8d6ba4cd4ab91ĭetermining the type of encoding for decrypting the password Set-Cookie: scifuser = networkguru expires = Thu, 0 23:52:21 GMT path = /Ĭontent-Type: text / html charset = UTF-8 Set-Cookie: non = non expires = Thu, 0 23:52:21 GMT path = / P3P: CP = 'NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM'

Wireshark capture packets from a website