In the Wireshark menu, click Edit/ Find Packet. In the Wireshark window, click Capture/Stop. Gmail will reject the credentials, just like the other website did. (You can go to any safe website, it doesn’t have to be on GMail)Įnter a valid Gmail account and the same password topsecretpassword, as shown below. Notice you are immediately redirected to. A pop-up asks 'Do you want to save the captured packets before starting a new capture?' Click 'Continue without saving'. Start another packet capture by going to Wireshark’s menu bar, click Capture, Start (or click the blue fin button on the top left. When login into plain HTTP websites, your credentials are sent in plaintext and can be easily captured and discovered. In the upper pane of Wireshark, right-click the HTTP packet and click ' Follow/TCP Stream', as shown below.Įxpand the 'Follow TCP Stream' box so that you can see YOURNAME and the topsecretpassword, as shown below. Wireshark shows an HTTP packet containing the searched text. In the Wireshark window, in the Filter bar, type as filter some of the text you entered as username, as shown below: In the Wireshark window click on the red square button to stop the capture The login will fail but that is not important. But it shows a lot more information than you usually want to know.Įnter a Username of (using your own name, not the literal string 'YOURNAME') and a password like topsecretpassword, as shown below:

Every packet sent from or to your machine is shown here. You should see packets being captured and scrolling by, as shown below on this page.

In the Manage Interfaces windows, select the desired interface where you want to capture trafficīack to the starting windows, double click on the interface to start the capture Make sure your interfaces are in promiscuous mode. Note: If you have problems with WinPCap under Windows 10, get the driver from Reboot the machine to load the WinPCap driver Open a Web browser and go to ĭownload and install the latest version of Wireshark.

I wrote the instructions with Windows 7.

Installing the Wireshark Packet SnifferWhat you need for this task:

Wireshark password capture