+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: How to sniff traffic on a network? (/showthread.php?tid=6044724)
How to sniff traffic on a network? - Sxtxn - Jan 28, 2020
So I've seen a lot of tutorials about this matter but hey end up not working somehow so I'd just appreciate someone with experiencie just give me some advice.
My goal is to sniff everything happening on a wifi (I'm testing on my own network), seeing what websites are being visited, etc; without the users seeing "connection is not secure" or nothing like that.
I'm not asking for a one-click thing, I understand there's more than just doing something like that. What I'd like is someone more advanced to guide me on the right direction on what should I look into.
Thanks in advance ✌
RE: How to sniff traffic on a network? - Lynx - Jan 28, 2020
I recommend using wireshark. There are lots of tutorials on the program.
RE: How to sniff traffic on a network? - Ramb0x - Jan 28, 2020
Anybody knows it how to doit in C#?
RE: How to sniff traffic on a network? - RubberMoose - Jan 28, 2020
I would agree with Lynx, WireShark is probably your best option in this case. There are a lot of examples online and its fairly intuitive to use.
RE: How to sniff traffic on a network? - Flash7475 - Jan 28, 2020
(Jan 28, 2020 07:23 AM)Ramb0x Wrote: Anybody knows it how to doit in C#?
Why would you want to do it in C#? it would be easier just to use wire shark. you'd be reinventing the wheel oherwise.
RE: How to sniff traffic on a network? - Ramb0x - Jan 28, 2020
For console version of sniffer. Save log to .txt file etc....
RE: How to sniff traffic on a network? - CyberStrike - Jan 28, 2020
Actually it's not a bad idea take the following scenario, you are on a target network want to capture some traffic yet putting wireshark/tshark/netmon is not an option, this can be used to capture credentials. If the device supports promiscuous mode, then that is excellent. I have done it in PowerShell so I know it's possible in C# as well, that (promiscuous mode) was honestly the most tricky but MSDN to the rescue. It might be easier to save as an etl but it's easy to convert it to a .cap for later analysis.
https://docs.microsoft.com/en-us/dotnet/api/system.net.sockets.iocontrolcode?view=netframework-4.8 - Putting device into promiscuous mode
https://isc.sans.edu/forums/diary/No+Wireshark+No+TCPDump+No+Problem/19409/ -- convert etl to cap file