Snipping Someone`s Password using Wireshark Ethically (Password Hacking )

Wireshark is a network packet analyzer. A network packet analyzer presents captured packet data in as much detail as possible. You could think of a network packet analyzer as a measuring device for examining what’s happening inside a network cable, just like an electrician uses a voltmeter for examining what’s happening inside an electric cable but at a higher level, of course

In the past, such tools were either very expensive, proprietary, or both. However, with the advent of Wireshark, that has changed. Wireshark is available for free, is open source, and is one of the best packet analyzers available today.

Wireshark is the world’s foremost and widely-used network protocol analyzer. It lets you see what’s happening on your network at a microscopic level and is the de facto (and often de jure) standard across many commercial and non-profit enterprises, government agencies, and educational institutions. Wireshark development thrives thanks to the volunteer contributions of networking experts around the globe and is the continuation of a project started by Gerald Combs in 1998.

By using Wireshark we should be able to do the following things

• Live capture from many different network media: – Wireshark can capture traffic from many different network media types, including Ethernet, Wireless LAN, Bluetooth, USB, and more. The specific media types supported may be limited by several factors, including your hardware and operating system.
• Many protocol dissectors: – There are protocol dissectors (or decoders, as they are known in other products) for a great many protocols
• Export files for many other capture programs: – Wireshark can save captured packets in many formats, including those used by other capture programs.
• Wireshark also lets the user put network interface controllers into promiscuous mode (if supported by the network interface controller), so they can see all the traffic visible on that interface including unicast traffic not sent to that network interface controller’s MAC address. However, when capturing with a packet analyzer in promiscuous mode on a port on a network switch, not all traffic through the switch is necessarily sent to the port where the capture is done, so capturing in promiscuous mode is not necessarily sufficient to see all network traffic.

Here are some other reasons why Wireshark would be useful:

• Network administrators use it to troubleshoot network problems
• Network security engineers use it to examine security problems
• QA engineers use it to verify network applications
• Developers use it to debug protocol implementations

People use it to learn network protocol internals. and you can use wireshark in any windows OS or Linux i`m going to use Kali Linux and its pre-installed there, you can download the windows version at wireshark.org all the steps are thesame.

Lets begin to Hack!

In you`re Kali Linux navigate to application, snipping and spoofing then I click on wire shark as shown Below

 After it opens choose any interface and click on the shark icon to start

after that, wireshark would start to capture all the traffic going in and out of you`re network, as you can see below the victim has enter into a website and enter his/her login credentials as we can see down below.

as a result of there a many request going through you`re network wireshark can allow you to filter a specific type of request in this case we only need http post or GET request so i filtered it we can only see a http request.

How to Prevent yourself from this kind of attack

Applications should use transport-level encryption (SSL or TLS) to protect all sensitive communications passing between the client and the server. Communications that should be protected include the login mechanism and related functionality, and any functions where sensitive data can be accessed or privileged actions can be performed. These areas should employ their own session handling mechanism, and the session tokens used should never be transmitted over unencrypted communications. If HTTP cookies are used for transmitting session tokens, then the secure flag should be set to prevent transmission over clear-text HTTP.

That’s All. Thank you!