Technofriends

You learnt about WireShark Basics in my earlier post titled  . In this post, i shall take you a little more deeper and introduce to the process of grabbing Cookies and Passwords using WireShark. As already known, WireShark is a Network Packet Analyzing tool which can be used to grab and analyze the various network packets passing through the Network Interface. This even includes Cookies and Passwords passing through the network interface card. 

If you are new to the term Cookies, read out my previous post Understanding HTTP Cookies. In short, As HTTP is a stateless protocol, Cookies are one of the ways used to maintain browser state. Once a Cookie has been set on a domain and a specific path, it is echoed back in every subsequent request to the domain and path combination.

1.) Start WireShark and set a filter for HTTP results. (For detailed step by step process, read WireShark Basics)

2.) In order to set a cookie, Navigate to http://httprecipes.com/1/2/cookies.php and click on the link “Set Cookie”. You will be asked to enter a value to the cookie. Enter “technofriends” (without quotes) and press Set. This will set the cookie test-cookie with a value “technofriends”. 

3.) In WireShark, select the appropriate row with data to and from domain httprecipes.com. Lookout for Set-Cookie in HyperText Transmission Protocol. 

4.) Passwords, passed as cleartext can also be grabbed easily using WireShark.

Also, you might be interested in checking out the video below. The video explains clear step by step ways of grabbing cookies and passwords using WireShark.

You can follow me on Twitter at http://twitter.com/vaibhav1981

Do stay tuned to Technofriends for more, one of the best ways of doing so is by subscribing to our feeds. You can subscribe to Technofriends feed by clicking here.

Related posts:

1. [How-To] Using WireShark for Packet Analysis ( Part 1)
2. Understanding HTTP Cookies
3. [Security] Hijacking Session Cookies using Surfjack
4. [How-To]Bypassing Passwords in Windows
5. FlashCookiesView Displays list of Cookie files created by Flash Components