1. The document provides instructions for using the Wireshark network packet analyzer to capture login credentials in plain text HTTP traffic. It demonstrates logging into Wikipedia with a test username and password, then viewing the unencrypted password in the captured packet data in Wireshark.
2. The instructions then have the user log into Gmail, which encrypts the password before transmission, so it cannot be seen in the packet capture. The user is asked to take a screenshot of the captured Wikipedia password and submit it as their project.
1. The document provides instructions for using the Wireshark network packet analyzer to capture login credentials in plain text HTTP traffic. It demonstrates logging into Wikipedia with a test username and password, then viewing the unencrypted password in the captured packet data in Wireshark.
2. The instructions then have the user log into Gmail, which encrypts the password before transmission, so it cannot be seen in the packet capture. The user is asked to take a screenshot of the captured Wikipedia password and submit it as their project.
1. The document provides instructions for using the Wireshark network packet analyzer to capture login credentials in plain text HTTP traffic. It demonstrates logging into Wikipedia with a test username and password, then viewing the unencrypted password in the captured packet data in Wireshark.
2. The instructions then have the user log into Gmail, which encrypts the password before transmission, so it cannot be seen in the packet capture. The user is asked to take a screenshot of the captured Wikipedia password and submit it as their project.
1. The document provides instructions for using the Wireshark network packet analyzer to capture login credentials in plain text HTTP traffic. It demonstrates logging into Wikipedia with a test username and password, then viewing the unencrypted password in the captured packet data in Wireshark.
2. The instructions then have the user log into Gmail, which encrypts the password before transmission, so it cannot be seen in the packet capture. The user is asked to take a screenshot of the captured Wikipedia password and submit it as their project.
Download as DOC, PDF, TXT or read online from Scribd
Download as doc, pdf, or txt
You are on page 1/ 4
Project 3: Sniffing for Passwords with Wireshark Worth 10 Points
What You Need for This Project
LEGAL WARNING! A computer running any version of Windows, with Internet access. You need administrator Use only machines you own, or privileges. machines you have permission to Installing the Wireshark Packet Sniffer hack into. Hacking into machines without permission is 1. Open a Web browser and go to WireShark.org a crime! Don’t do it! If you do 2. Download and install the latest version of illegal things, you may be Wireshark. The installer will also install WinPCap. arrested and go to jail, and I will be unable to save you. These Starting a Packet Capture instructions are intended to train 3. Click Start, All Programs, Wireshark, computer security professionals, Wireshark. not to help criminals. 4. From the Wireshark menu bar, click Capture, Interfaces. 5. In the "Wireshark: Capture Interfaces" box, find the Interface that shows an increasing number of packets. In the example as shown below on this page, it's the top one. Click the Start button in that interface’s line.
6. You should see packets being captured and scrolling by, as shown below on this page. Every packet sent from or to your machine is shown here. But it shows a lot more information than you usually want to know.
CNIT 120 - Bowne Page 1 of 4
Project 3: Sniffing for Passwords with Wireshark Worth 10 Points
Sending a Test Password to Wikipedia
7. Open Firefox and go to wikipedia.com 8. Click English 9. On the top right of the screen, click "Log In". 10. Enter a Username of joe and a Password of topsecretpassword as shown to the right on this page. 11. Do NOT put in your real user name and password! As you will see, this Web page is not secure. After this lab, you might not want to use it anymore! 12. Click the "Log In" button. If you see a message asking whether to remember the password, click "Not Now". 13. In the Wireshark window, box, click Capture, Stop. Observing the Password in Wireshark 14. In the Wireshark window, box, click Edit, "Find Packet". 15. In the "Wireshark: Find Packet" box, click the String button. Enter a search string of secret, as shown to the right on this page. In the "Search In" section, click "Packet bytes". Click Find.
CNIT 120 - Bowne Page 2 of 4
Project 3: Sniffing for Passwords with Wireshark Worth 10 Points
16. Wireshark finds the text. It highlights a packet with a Protocol of HTTP, as shown below on this page. 17. In the bottom pane of the Wireshark window the raw packet data is shown in hexadecimal on the left and in ASCII on the right. The password is visible on the right side, as shown in the figure below. Password
Saving the Screen Image
18. Make sure the captured password is visible in the Wireshark window. 19. Press the PrintScrn key in the upper-right portion of the keyboard. 20. Click Start and type in Paint. Click Paint. 21. Press Ctrl+V on the keyboard to paste the image into the Paint window. Save the document with the filename Your Name Proj 3. Close Paint.
CNIT 120 - Bowne Page 3 of 4
Project 3: Sniffing for Passwords with Wireshark Worth 10 Points
Starting Another Packet Capture
22. From the Wireshark menu bar, click Capture, Start. 23. A bob pops up asking "Save capture file before starting a new capture?" Click "Continue without saving". Using a Secure Password Transmission 24. In Firefox, go to gmail.com. Log in with the fake name JoeUser and password topsecretpassword, as shown to the right on this page. 25. In the Wireshark window, box, click Capture, Stop. Observing the Password in Wireshark 26. In the Wireshark window, box, click Edit, "Find Packet". 27. In the "Wireshark: Find Packet" box, click the String button. Enter a search string of secret. Click Find. 28. A message appears in the status bar at the bottom of the Wireshark window, saying "No packet contained that data". The password cannot be found because Gmail encrypts it before transmitting it. Turning in your Project 29. Email the image to me as an attachment to cnit.120@gmail.com with a subject line of Proj 3 From Your Name. Send a Cc to yourself.
