use wireshark to capture localhost traffic

What if the traffic is encrypted and using HTTPS? SMTP protocol and you will need to enter the following filter: = “AUTH”Īnd more serious utilities to decrypt the encoding protocol.IMAP protocol and filter will be: imap.request contains “login”.

The POP protocol and filter looks like this: = “USER” || = “PASS”.

You can also learn passwords to user mailboxes using simple filters to display: Thus, using Wireshark, we can not only solve problems in the operation of applications and services, but also try ourselves as a hacker, intercepting passwords that users enter in web forms. I was given a list of coding protocols in order of priority:Īt this stage, we can use the hashcat utility:~ # hashcat -m 0 -a 0 /root/wireshark-hash.lf /root/rockyou.txtAt the output we got the decrypted password: simplepassword We go, for example, to the site and enter our password into the window for identification. Password: e4b7c855be6e3d4307b8d6ba4cd4ab91ĭetermining the type of encoding for decrypting the password Set-Cookie: scifuser = networkguru expires = Thu, 0 23:52:21 GMT path = /Ĭontent-Type: text / html charset = UTF-8 Set-Cookie: non = non expires = Thu, 0 23:52:21 GMT path = / P3P: CP = 'NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM'

Use wireshark to capture localhost traffic