[itsBarbz]

My target is vulnerable by not encrypting users credentials:

A third party may be able to read the user credentials by intercepting an unencrypted HTTP connection.

How would I intercept my target website????

[V3N0M4]

i am also finding same thing

[SIM-487530]

i think for that u should know sql injection

[Mishoo]

im courious about that thoo...how to intercept...

[Thenightturtle]

You have to have access to the targets network for the kind of thing I think you're talking about. I'm not too sure though, Sorry, You're post's a bit vague. If you're saying you want to access someones information, And that person is on your home network and is connecting to this site, Then you should download wireshark and learn how to use it. If you mean you want to see what someone who isn't on your network is doing on this website then I'm afraid it's not possible as far as I'm aware. I could be wrong though, If you look around there might be something. :)

[AlwaysWillingtoLearn]

A website i have come across has "forms" and user login credentials that are not encrypted when they are transmitted. Is there a tutorial or a way to intercept and read these user credentials through their unencrypted http connection?

[Captnroram]

A website i have come across has "forms" and user login credentials that are not encrypted when they are transmitted. Is there a tutorial or a way to intercept and read these user credentials through their unencrypted http connection?

I am quite sure you can't do it unless you're on the same network. But if you are, you can do as mentioned above, and use Wireshark.

Or if you're running Linux, Ettercap is an awesome tool.