WIRESHARK - thrisha-001/Cyber-Security-Placement-Training GitHub Wiki
DAY - 01
What is Wireshark?
Wireshark is a network packet analyzer. A network packet analyzer presents captured packet data in as much detail as possible. Wireshark is available for free, is open source and is one of the best packet analyzers available today.
STEP 1: Wireshark is a pre-installed tool in kali linux. Open the Wireshark, check the internet connectivity and select the interface.
STEP 2: In browser, test with a website. We have used testifire.net website, then open the login page.
STEP 3: Try to login, we may not be able to login but we can capture the username and password with the help of Wireshark.
STEP 4: Now switch to Wireshark, use the command : http.request.method==“POST”.
STEP 5: Captured http packets will be displayed and in that we need to find http packet we used for the website.
STEP 6: If we click the packet of the website, username and password will be displayed.