Now we will apply a filter s we can cut through all the packets to narrow it down to what we are looking for. So go ahead in Wireshark and press the stop button. So now we can turn off Wireshark, and filter the packets captured to find what we are looking for. Now we are logged in, Wireshark will have captured more packets. You can see when we load the website Wireshark has captured lots of packets.

Let’s jump over to our web browser and attempt to login to a website that has unsecured login with HTTP. Now you are capturing packets, if there is lots of network traffic going on (most likely if you are on public wifi) you will see a LOT of data being displayed. So first fire up Wireshark in Kali Linux, you will need to select your network adapter and then you will have a screen like this For the purposes of this tutorial, I’m going to give an example of how easy it is when using an unsecured HTTP connection for someone to steal your username and password. There is a caveat, almost any website worth anything these days uses HTTPS, and Wireshark will be of no use. This is a good example of why you should not use public wifi hotspots to login to websites. Basically it will capture all the network packets that are transferred on a given network.

Wireshark comes packaged in Kali Linux, and is a useful packet sniffer.

Kali linux wireshark tutorial