Sniff HTTP Password

SNIFF HTTP PASSWORD 

INTRODUCTION 

• In this tutorial we are going to see how to sniff the http password .
• As we all know Http stands for " Hypertext Transfer Protocol " , it uses port 80 for web browsing , but do you know that  
• Sniffing is also possible in http protocol .
• Yes , you are thinking right sniffing using wireshark . So this whole tutorial we are going to see how we can sniff username and           password in case of http protocol .
• To demostrate this tutorial i desiged a whole scenario .

THINGS REQUIRED 

1. Wireshark : Download this tool from wireshark website .
2. OS : In this case i used windows 7 .
3. Website : For demonatration i used way2sms website which uses http protocol.

Note : I have made some changes & hide data for security reasons .

STEP 1 : OPEN WIRESHARK AND SELECT YOUR INTERFACE

• Open wireshark > Select interface >Click start button .
• In my case i select local area connection and click on start .
• See the below image for more details -

LOGIN TO WAY2SMS

STEP 2 : Enter username and password 

• In this step , open website : www.way2sms.com
• Enter Mobile Number : xxxxxxxxxx
• Password : xxxxxx
• And press Login 
• See this below example image for more details -

SUCCESSFULLY LOGGEDIN INTO WAY2SMS ACCOUNT 

• In this , now  i am successfully able to loggedin into my way2sms account .
• See the below image for more details - 

FILTER HTTP PASSWORD 

STEP 3 :  On wireshark ,

• Click on the Filter bar and enter http .
• As you press enter , it will display only HTTP protocol .
• Now find the packet that i marked with the red box in the below image.
• Now double click on the packet to see username & password.

HERE IS THE USERNAME AND PASSWORD 

• And the journey of http ends here .
• In the below image inside http section of this packet , you can see the username  and password in plain text .
• See the below image for more details -

 CONCLUSION 

• This tutorial shows that how the clear text is transfer in the interface if you use http protocol .
• This practical demontration shows that disadvantage of http ( username & password shows in plain text ).
• To overcome this problem always use https which provide  a secure channel for data transfer .
• Now keep follow www.hackingdna,com for more tutorial and don't forget to subscribe our youtube channel .
• I hope you like our new networking article .Leave your comments in our facebook like page
• Facebook Page :  https://www.facebook.com/hackingDNA

THIS TUTORIAL IS JUST FOR EDUCATIONAL PURPOSE ONLY 

AND REMEMBER THAT IT IS ILLEGAL TO SNIFF SOMEONE CREDENTAILS WITHOUT NOTICE 

NOW WHATEVER YOU DO , YOU YOURSELF RESPONSIBLE FOR IT