Scribd
Upload
14 views15 pages

003 NetworkSniffing

The document discusses network hacking, specifically focusing on network sniffing techniques using a Network Interface Card (NIC) in monitor mode to capture data packets. It explains methods for downgrading secure HTTPS traffic to HTTP using tools like sslstrip and ettercap, followed by analyzing the captured data with Wireshark. The document highlights the risks of man-in-the-middle attacks and the importance of identifying unencrypted data for potential exploitation.

Uploaded by

sanir80972
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
14 views15 pages

003 NetworkSniffing

The document discusses network hacking, specifically focusing on network sniffing techniques using a Network Interface Card (NIC) in monitor mode to capture data packets. It explains methods for downgrading secure HTTPS traffic to HTTP using tools like sslstrip and ettercap, followed by analyzing the captured data with Wireshark. The document highlights the risks of man-in-the-middle attacks and the importance of identifying unencrypted data for potential exploitation.

Uploaded by

sanir80972
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Network Hacking

Network Sniffing

▪ Before we start Network Hacking we need to know


▪ Network interface card (NIC)
Network Sniffing

▪ It can be on two modes


▪ First (Managed Mode ) it is normal mode to
take internet and don't make hostspot
▪ Monitor Mode (hacking mode )
▪ It is for capturing the data and making hostspot

▪ When we work we will convert NIC to monitor mode


Network Sniffing

▪ Sniffing is to capture packets of


data transmitted by other computers
▪ Having the packets will allow us to read and
analyze sensitive data , password, visa card
, usernames etc...
Network Sniffing

▪ The most popular way to attack network is man in


the middle attack or (MITM)

client client
Hacker
Network Protocols

▪ When You sniff if found http not https then it


would be easy to capture the data and analyze it
as
▪ [Link]
But if you found https then it is secure and you need
to downgrade it to http
Network Sniffing

▪ To downgrade the https to http you will


use ( sslstrip tool ) in linux

▪ Afte using sslstrip to downgrade https to http then


use ettercap tool with the network interface card
in ( monitor mode )
Wireshark

▪ The next step is to use wireshark to analyze the


data of packets
▪ It shows you all packets going from victim
To server and vise verse
▪ It is build in linux system just write
▪ writeshark
Wireshark

▪ Once you opened it will appear like that


Network Sniffing

▪ Choose wlan0 or wlan0mon if found


▪ After entering you will find thousands of packets
every minute
▪ Observe the titles (source , destination ,
protocol )
▪ You need to focus on protocol and search for
udp or ftp or ssh or
Network Sniffing
Network Sniffing
Network Sniffing

▪ Then I need you to visit


▪ [Link]
And sign in with username: test and password: test

Go back to wireshark and observe there is POST


request with the sensitive data
Network Sniffing
Questions

You might also like