Hack Forums
How do find usernames and passwords in Wireshark! - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: How do find usernames and passwords in Wireshark! (/showthread.php?tid=3464601)

Pages: Pages 1 2 3

How do find usernames and passwords in Wireshark! - Erwin Schrödinger - May 7, 2013

Hello!
Today I'm gonna tell you how to find Usernames and Passwords with Wireshark. This method works aslong as the other person you will hack is on the same network as you are.

Step 1. In Wireshark select your internet card, and press start.
[Image: 2P6Hc.png]

Step 2. When you are here you must apply http to the filters.
[Image: 2P6JH.png]

Step 3. After you have applyed that filter you can now stop searching for packets.
This is the buttton: [Image: 2P6M0.png]

Step 4. When you know when the person is logging it to whatever it is. Maby a http based browser game, you start searching for packets agian.
This is the button to restart the searching:[Image: 2P6PB.png]

Step 5. When the person is logged in you will see some new packets come up. (Remember to use the http filter.) If you look at the info tab you are looking for the one that starts with "post".
[Image: 2P6Tv.png]

Step 6. Right click on that and press "Follow TCP stream".
[Image: 2P6X8.png]

Step 7. In here you will se red text and blue text. The red text is your request, and the blue text is the servers "awnser". If you look your first request at it's last line you will see the username and password.
[Image: 2P70G.png]

Thank you for reading it all! Did you like it? Did it help you? Tell me bellow!

Here is a video on how to do it.



* - on-silo - May 7, 2013

was short sweet and to the point, well done for those who dont wanna really dive into wireshark for whatever reason.

* - efinitix - May 8, 2013

cheers for the tutorial needed to use wireshark to test some "things" :P

* - Endonium - May 8, 2013

Wireshark can also be used to recover the passwords from loggers, stealers, even some bots/rats.

When you execute the virus (do it is sandboxie dont be an idiot, or even better on a VM) it will attempt to connect to whatever email/server it sends info it collects to.

You can find that string of data and get login/pass.

Doesn't work for everything, quite. Few encrypt the data packets.

* - Erwin Schrödinger - May 8, 2013

I'm glad everyone liked it! :D
(May 8, 2013 01:29 AM)Endonium Wrote:  Wireshark can also be used to recover the passwords from loggers, stealers, even some bots/rats.

When you execute the virus (do it is sandboxie dont be an idiot, or even better on a VM) it will attempt to connect to whatever email/server it sends info it collects to.

You can find that string of data and get login/pass.

Doesn't work for everything, quite. Few encrypt the data packets.

Cool, I didn't know that! Maby it will help me one day? =)

* - Creatiiviity. - May 8, 2013

Good Tut and very well explained. Thanks

* - Altijd Bezig - Oct 10, 2013

Real sweet.
I'm sure that this is helpful to me.

I just went ahead and tested this on my own account.
Could not find any usernames or passwords.
Hope one of you can help me out.

* - Erwin Schrödinger - Oct 11, 2013

(Oct 10, 2013 02:46 PM)Altijd Bezig Wrote:  Real sweet.
I'm sure that this is helpful to me.

I just went ahead and tested this on my own account.
Could not find any usernames or passwords.
Hope one of you can help me out.
When you're trying to take passwords from Wireshark it need to be on HTTP severs not HTTPS servers. A https means that it's crypted.

You could try it on the browser game "Tribal wars". They're servers are not crypted.

(You don't need a real username and pass to make it work. As long at you get the "Wrong login" it's enough.)

* - Altijd Bezig - Oct 11, 2013

I tried it on the game Tribal Wars and Grepolis.
Both with actual accounts.

I was using mobile to login on the Web version.
I don't think that's the problem because I was using the normal Web version and not the mobile version.

* - Erwin Schrödinger - Oct 11, 2013

(Oct 11, 2013 12:32 AM)Altijd Bezig Wrote:  I tried it on the game Tribal Wars and Grepolis.
Both with actual accounts.

Hmm, I can probally help you later today!

* - Altijd Bezig - Oct 11, 2013

Ok.
Thanks.

With a bit off luck I'm online around 21:00 local time.
Thats is 11 hours from now.

* - Cyprella - Oct 11, 2013

Great tutorial, small spelling mistake on answer.

* - ORK24 - Oct 11, 2013

Thanks mate, will be quite useful (:

* - Erwin Schrödinger - Oct 11, 2013

Thanks for the great feedback! :)
(Oct 11, 2013 05:57 AM)MLGL33TPRO Wrote:  Great tutorial, small spelling mistake on answer.
Yeah, I see. I'm not a native English speaker.

* - Smexy - Oct 11, 2013

So does anyone know this works trough hamachi because then i can steal ALOT.
Please someone anwser quick.