So as we've seen in the previous lesson, passwords really are problems, aren't they?
We can reveal passwords stored in a browser.
We can also sniff passwords running across a network.
In this lesson, we're going to see how to use a tool called Wireshark, a really popular tool for security
and for hacking to capture unencrypted passwords.
When they go across our network, you're going to see why you should always make sure you've got a secure
connection and connection to a website.
Whenever you enter your username and password, we're going to need to run three virtual machines to
work this lab.
I'm going to show you you can do this several different ways because I'm going to show you how to use
your medicine, voidable your Windows seven and your Windows 10 VMS.
And we're going to listen in to our local area network from this Windows 10 machine.
And we're going to capture information going from our Windows seven computer, trying to log in to a
website on a Mideast voidable box.
So, first of all, let's start up get exploitable.
And if you've logged out of Métis voidable or if it's shut down and you have to restart, remember,
MSF a.T.M in it's given to us right here is the log in and MSF in the high end as the password.
And we just need to do an IV config to make sure we get the 10 Agota three address that that machine
is on.
So it is on my 10 Dorota three to five this time and then we can minimize the Métis floatable virtual
machine window.
Next, we're going to run our Windows seven box, and we just need to check for sure what network that
Windows seven machine is on.
We're going to make sure that we're on our V box net zero host only adapters.
Well, that should give us a 10 Agota three address.
We don't need to worry about the address of the Windows seven box.
Just get it up and running.
Then finally, we're going to open the Windows 10 VM and go ahead and log into it.
And we're going to need to connect the Windows 10 machine out to the public in that network just for
a moment so that we can download Wireshark.
So come with me to the network controller for the Windows 10.
We're going to take it off of host only go to the Nat network public Matt and hit OK, come down to
the lower right corner and we're going to disconnect that network adapter.
Then we're going to reconnect it and then we will try one of our browsers to see if we get a good connection
not to the Internet, let's say Wireshark dot org.
If you don't get a good connection to the Internet there, just reconnect that network adapter and try
it again.
And if you still don't get an Internet connection, we just need to run ACMD.
Can do IP config.
And you can see we've still got a private internal host, only ten point three address, I'm going to
say IP config release.
And then IPE configuring you now that we have a 10 down 099 address, we're public to the Internet,
we should be able to reload this page.
And we're going to download Wireshark from Wireshark, Dot, R.G., come to the download link and we're
running a 64 bit version of Windows, so we're going to download the 64 bit Windows installer.
They should take just a little while to download, and then you'll run the installer to set up Wireshark
and the installer will take you through just a regular couple of next's and agrees when it comes to
the part that asks if you want to install wind cap, yes, you need to install whimp cap that allows
us to do packett capturing on windows hit next.
And you don't need to install USB cap, but if you want to, that's one that you can add as well.
We'll just click next and allow it to install during the installation, you get a pop up like this one
says, Welcome to Whimp Cap installation.
You just want to next and agree your way through.
And it'll automatically start the Wimpey cab driver at boot time install.
And finish when Wireshark finishes installing him next, and we can go ahead and run Wireshark as soon
as it finishes and we are going to take Wireshark off of our public Internet.
Now that we have Wireshark installed, we want to make sure that this machine is not running on our
public network.
Let's switch it back.
So on your network adaptor.
Take it off the NAT network and bring it back to the host, only the box net zero.
Click OK, and then one more change while we're in the network, we can come to advanced for this vaccine
at zero and we're going to turn on what we call promiscuous mode and we're going to allow that for all
the victims.
What this means is we're going to override some of the code that's part of our network adapter card
that keeps that network adapter card from paying attention to traffic that's meant for other computers
by default.
Everything that flows over the network is visible, but on most network cards, promiscuous mode is
turned off.
We're going to allow promiscuous mode for our VMS so that we'll be able to see traffic that's meant
for other victims from one computer.
If you're doing this on a larger network, you can even turn it on for all.
If you are the owner and operator of that network and have explicit permission to do so.
Running Wireshark on a public network or on a shared network or on your work or school network can get
you into a lot of trouble.
So don't do this anywhere that you don't have access.
So we're going to allow just for VMS.
And click OK, then, to be safe, we're going to come back to our command prompt in Windows 10 will
type ACMD.
And we will do an IP config release and an IP config slash renew.
And when that comes back with a ten point 023 address, we know we are on the private internal host
only Network Tendo, not three to six, and we can proceed with the lab.
We'll see how to sniff the password.
Now that we've got a Wireshark set up, we will try to log into a Web page from our Windows seven box
onto the Métis voidable machine.
And this Windows 10 computer off to the side is going to sniff that username and password.
We'll see it in the next lesson.