+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Quick question about Passwords Transmitted over HTTP (/showthread.php?tid=5591315)
Quick question about Passwords Transmitted over HTTP - z3r0x1 - Apr 3, 2017
So I've been using Netsparker in some webpages mostly for pentesting and I've realized that a lot of webpages have this vulnerability marked as important called 'Password Transmitted over HTTP'.
Well, I do know what that means. But the thing is that it says:
'If an attacker can intercept network traffic, he/she can steal users' credentials.'
How would you intercept network traffic? I don't think you can do it from home, since you must be connected to same network as your victim.. or.. can you do it from home? Maybe using some cool sniffer?
Light me up, I've always been into basic SQLi or XSS, but not this.
Thanks.