[Erwin Schrödinger]

Hello!
Today I'm gonna tell you how to find Usernames and Passwords with Wireshark. This method works aslong as the other person you will hack is on the same network as you are.

Step 1. In Wireshark select your internet card, and press start.


Step 2. When you are here you must apply http to the filters.


Step 3. After you have applyed that filter you can now stop searching for packets.
This is the buttton:

Step 4. When you know when the person is logging it to whatever it is. Maby a http based browser game, you start searching for packets agian.
This is the button to restart the searching:

Step 5. When the person is logged in you will see some new packets come up. (Remember to use the http filter.) If you look at the info tab you are looking for the one that starts with "post".


Step 6. Right click on that and press "Follow TCP stream".


Step 7. In here you will se red text and blue text. The red text is your request, and the blue text is the servers "awnser". If you look your first request at it's last line you will see the username and password.


Thank you for reading it all! Did you like it? Did it help you? Tell me bellow!

Here is a video on how to do it.

[on-silo]

was short sweet and to the point, well done for those who dont wanna really dive into wireshark for whatever reason.

[efinitix]

cheers for the tutorial needed to use wireshark to test some "things" :P

[Endonium]

Wireshark can also be used to recover the passwords from loggers, stealers, even some bots/rats.

When you execute the virus (do it is sandboxie dont be an idiot, or even better on a VM) it will attempt to connect to whatever email/server it sends info it collects to.

You can find that string of data and get login/pass.

Doesn't work for everything, quite. Few encrypt the data packets.

[Erwin Schrödinger]

I'm glad everyone liked it! :D

Wireshark can also be used to recover the passwords from loggers, stealers, even some bots/rats.

When you execute the virus (do it is sandboxie dont be an idiot, or even better on a VM) it will attempt to connect to whatever email/server it sends info it collects to.

You can find that string of data and get login/pass.

Doesn't work for everything, quite. Few encrypt the data packets.

Cool, I didn't know that! Maby it will help me one day? =)

[Creatiiviity.]

Good Tut and very well explained. Thanks

[Altijd Bezig]

Real sweet.
I'm sure that this is helpful to me.

I just went ahead and tested this on my own account.
Could not find any usernames or passwords.
Hope one of you can help me out.

[Erwin Schrödinger]

Real sweet.
I'm sure that this is helpful to me.

I just went ahead and tested this on my own account.
Could not find any usernames or passwords.
Hope one of you can help me out.

When you're trying to take passwords from Wireshark it need to be on HTTP severs not HTTPS servers. A https means that it's crypted.

You could try it on the browser game "Tribal wars". They're servers are not crypted.

(You don't need a real username and pass to make it work. As long at you get the "Wrong login" it's enough.)

[Altijd Bezig]

I tried it on the game Tribal Wars and Grepolis.
Both with actual accounts.

I was using mobile to login on the Web version.
I don't think that's the problem because I was using the normal Web version and not the mobile version.

[Erwin Schrödinger]

I tried it on the game Tribal Wars and Grepolis.
Both with actual accounts.

Hmm, I can probally help you later today!

[Altijd Bezig]

Ok.
Thanks.

With a bit off luck I'm online around 21:00 local time.
Thats is 11 hours from now.

[Cyprella]

Great tutorial, small spelling mistake on answer.

[ORK24]

Thanks mate, will be quite useful (:

[Erwin Schrödinger]

Thanks for the great feedback! :)

Great tutorial, small spelling mistake on answer.

Yeah, I see. I'm not a native English speaker.

[Smexy]

So does anyone know this works trough hamachi because then i can steal ALOT.
Please someone anwser quick.