Why are you still using HTTP?

[@davidbombal]

Why are you still using HTTP? HTTP is a really insecure protocol. Everything is sent in clear text. Don't use HTTP. Get the full Wireshark course for $9: bit.ly/wireshark9 Need help? Join my Discord: discord.com/invite/usKSyzb Download pcapng file: bit.ly/2FzdstC ====================== Special Offers: ====================== Cisco Press: Up to 50% discount Save every day on Cisco Press learning products! Use discount code BOMBAL during checkout to save 35% on print books (plus free shipping in the U.S.), 45% on eBooks, and 50% on video courses and simulator software. Offer expires December 31, 2020. Shop now. Link: bit.ly/ciscopress50 ITPro.TV: itpro.tv/davidbombal 30% discount off all plans Code: DAVIDBOMBAL Boson software: 15% discount Link: bit.ly/boson15 Code: DBAF15P

[@thebalumnguni6708]

Hey man I was wondering if you could show us how to use http injector and get free payloads n such

[@sadsaad43v3r]

So helpful, Thanks sir! 😩

[@mariusavram7823]

Thank you! Today i have passed my CCNA. Your content really helps me. Keep it up!👍

[@davidbombal]

Congratulations Marius! That is fantastic news! Well done!

[@mariusavram7823]

@@davidbombal thank you!

[@lucas93177]

Congrat man, wish me good luck for the ENCOR!

[@mariusavram7823]

@@lucas93177 good luck!

[@avishkarsonni8000]

Congratulations marius that's really cool

[@Langelmaki]

Hey David, big fan of everything you do. You put lots of work into this and its obvious. I got out of the Navy after doing 8 yrs in medical, now switching to IT (my dream job) and avidly following you and Chuck. I know you know this already but you and Chuck are a massive inspiration to people like me and many others. Please, keep up your phenomenal work. You are literally changing peoples lives by making these videos. Thanks again David.

[@davidbombal]

Thank you! It's always amazing to hear stories like yours! Don't give up on your dreams.

[@Langelmaki]

@@davidbombal Failure is not an option sir! I got this, and ill be following your videos all the way. Take care!

[@adipurnomo5683]

@@Langelmaki great job

[@swapnilpatel898]

Sir, You are great. I have been following you from the last month. And I heard a lot about you when it comes to networking. My friend told me to enroll David and you will learn a lot. I enrolled it's been 10 days and I learn so many things. Thank you so much sir. Keep making cource like that. You are the inspiration for many. God bless you. Love from India David sir.

[@davidbombal]

Thank you Swapnil! Really happy to hear that :)

[@karamalshaltan6082]

Great job David, this is very good security awareness. Learning a lot from you.

[@davidbombal]

Thank you Karam! Glad you are learning :)

[@anuradhalakruwan1918]

Good lesson David sar..... 👍👍👍👍👍👍

[@davidbombal]

Glad you enjoyed the video Anuradha!

[@el-mehdihamraoui2848]

Great content Mr. David

[@davidbombal]

Thank you El-Mehdi

[@naeem8434]

Amazing video sir

[@kushalking156]

My laptop lags do you know how to fix it.

[@rayenbenslama442]

I wonder if fiddler is able to capture https and what is the difference between wireshark and fiddler ?

[@aditiagarwal8770]

Knowledge booster! Thanks!

[@davidbombal]

You're welcome Aditi

[@kaizoku47]

what about REST ? since it uses HTTP2 !! thanks

[@muhammedsavad6009]

Great class

[@davidbombal]

Thank you Muhammed

[@KiranKumar-dw4vq]

Awesome😊👏

[@davidbombal]

Thank you Mr KK!

[@vyasG]

Thank You.

[@davidbombal]

You're welcome Vyas! Thank you for your support!

[@realevesparks]

Would 2 factor authentication make up for the vulnerability of HTTP?

[@davidbombal]

It is better, but your passwords will still be captured. Better to use HTTPS with 2 factor authentication. Like everything in life, you need to decide on the risk vs hassle of adding more and more security. For a lab environment it doesn't matter as much if your passwords are captured compared to a production environment.

[@DH-rk9tr]

Can I use CML for CCNP Collaboration?

[@noyalmartin1871]

but for packet capturing the victim and attacker should be in same network right?

[@lptechCT]

Yes, if I am wrong that's know as the man in the middle attack.

[@AlexeyTsapaev]

I tryed the same experiment and could not read HTTP payload because of it's ZIP compressed. HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Dec 2020 18:41:49 GMT Content-Type: text/html Last-Modified: Fri, 21 Jun 2013 20:52:54 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=5 Vary: Accept-Encoding ETag: W/"51c4bd26-6f35" Expires: Mon, 14 Dec 2020 18:41:49 GMT Cache-Control: max-age=604800 Content-Encoding: gzip how can I decode that?

[@greggheffley3232]

can give free wireshark course?

[@rajdattkokate9940]

Sir i want your suggestions for my cyber security future .how i start this course..so

[@davidbombal]

See the link in the video description for this course. Otherwise look at the CompTIA Security+ course.

[@rajdattkokate9940]

Thank you sir

[@yassinech7824]

Thanks alot!!

[@davidbombal]

You're welcome

[@KINGSMUSICVLOGS]

I purchased your course from udemy.com and learned a lot things but the problem is,there is no job here for ccna in my area.but do can i relocate right now??..no, covid situation doomed us all.BTW thank you for bringing light to new peoples around the world who is new to networking..thank you#StudentFromIndia.

[@aarizkhanshaikh1111]

Wut about AdvPhishing they have https clone of website?

[@imammehedi8442]

sir, i download lectures from http websites without any login....is it still risky?

[@davidbombal]

The risk is that everything is in clear text - all your passwords etc. Websites can also be spoofed so how would you know that you are actually connecting to the right website?

[@imammehedi8442]

@@davidbombal it means they got my mail address and passwords in clear text..but Sir, i have enabled two step verification for my account.

[@realhomy]

Nice video

[@davidbombal]

Thank you!

[@realhomy]

@@davidbombal thank you for making the video

[@BeeBumper]

Only because stubborn habit

[@davidbombal]

lol.... bad habits :(

[@BeeBumper]

@@davidbombal agreed and will stop

[@AmanKhan-xw8cl]

First comment

[@davidbombal]

Appreciate the support Aman!

[@AmanKhan-xw8cl]

Big fan sir One heart pls

[@davidbombal]

Thank you Aman!