Scribd
Upload
3 views2 pages

LAB EXPERIMENT_4

Uploaded by

yutkarsh2660
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
3 views2 pages

LAB EXPERIMENT_4

Uploaded by

yutkarsh2660
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 2

LAB EXPERIMENT-4

PASSWORD SNIFFING

Password Sniffing
Password sniffing in cybersecurity refers to the malicious practice of intercepting and
capturing passwords as they are transmitted over a network. This technique typically exploits
unencrypted or weakly encrypted communication channels, allowing an attacker to obtain
sensitive credentials without the user's knowledge.
Key Points About Password Sniffing:
1. Methods of Sniffing:
Packet Sniffers: Tools like Wireshark or tcpdump can capture and analyze network traffic to
extract passwords.
Man-in-the-Middle (MitM) Attacks: An attacker positions themselves between the user and
the server to intercept communication.
Network Taps: Physical devices or software solutions that intercept data traveling over
network cables.
2. Targeted Protocols:

• HTTP: Passwords sent over unencrypted HTTP can be easily intercepted.


• FTP, Telnet, and SMTP: Older protocols that often transmit data in plaintext.

Password sniffing can lead to severe security breaches, including unauthorized access to
sensitive accounts and data. Therefore, employing robust encryption and network security
practices is crucial to protecting against such threats.
Exercise
1. Write Defense Mechanisms.

2. Capture and analyze the usernames and passwords from packets sent using the HTTP
protocol in Wireshark.

3. Capture and analyze the usernames and passwords from packets sent using the TELNET
protocol in Wireshark.
4. Capture and analyze the usernames and passwords from packets sent using the FTP
protocol in Wireshark.

You might also like