Wireshark 101: Wireshark with Social Networks, HakTip 131

[@RiDankulous]

Wireshark is soooo nice. Whoever wrote that deserves a big award.

[@seanc3362]

Nice vid Shannon! Ah I remember my first wireshark session. First thing I did, is see if I could snag my credentials on a locally hosted cms I managed. Yup. WELL that got me thinking. Time to buy a cert. LoL.

[@hak5]

hoof-hearted Thanks!

[@josueortiz1528]

what is the third party website you said? that can show your password on plain text

[@RiDankulous]

I just heard on the Security Now broadcast (or one in the last 3 months) that there's a way that you can decrypt your own TLS traffic to see the innards. Your browser will automatically decrypt and put the information in a special file that Wireshark can read. Google 'Security Now Episode 573' and go to the transcript, search for Wireshark. "I have in the show notes the link to the write-up, a detailed write-up of the way to decrypt TLS browser traffic with Wireshark. It turns out that developers can place an environment variable in their system, SSLKEYLOGFILE. So you set the SSL key log file to a specific filename. And Firefox and Chrome, only those two, but who needs anything else, will honor that environment variable. And here's the key. Every TLS connection the browser establishes, it logs the cryptographic keys for the connection. " Steve says it's good for developers. I'm not 100% sure it will be useful for hackers, but I believe there's nothing stopping us from decrypting our own TLS traffic. This could be extremely useful to look for potential vulnerabilities with the data an app is sending via encrypted channels. Good luck!

[@Paranoidhaze]

Haha, good to see that I wasn't the only one who registered the "433"-mistake throughout this video and video-description! :P

[@hak5]

Thank you for pointing out my flaw. - Shannon

[@KowboyUSA]

Excellent information.

your your inside your own network so you can sniff all data but its not always sent encrypted as it was a post method, its then encrypted and compared to the encrypted stored version for comparison sending it encrypted already requires client side script that could give away how it all works whitch would be less secure! its not as easy as you think to deal with encryption all the time at every level but storing it is very easy to make secure, then it relies on your files and how safe they are lol

[@troller4jesus]

HI HOW CAN I GET IP ADDRESS OF KZbinR FROM THEIR COMMENTS CAN I SNIFF THEIR COMMENTS HUH

[@yeyoangan2173]

where i find plaintestpassword?

[@rhillny]

Great information Shannon, new security analyst and HakTip has been my best friend as of late. Good thing your easy on the eyes...smoking hot.

[@liberator48]

Actually, she looks like that alien that plays the saxophone from Star Wars.

[@xplainerone9631]

Hey tehcie, use some hacking method to choke that green splash on your hair

[@khakims]

hey can you pleas show me how to find password of my router tnx :)

[@deathgamer8921]

I know how to do that, it's very easy :)

[@ByteBrizz]

@@deathgamer8921 even though your're about 4 years late for that guy, mind telling me how

[@deathgamer8921]

@@ByteBrizz sure :) ok so what you wanna do is hit the windows logo in the bottom left corner and then type command prompt and then once you see it you right click on it and run as administrator. The second thing you need to do once it opens type cd\ then press enter and then type netsh and then press enter and then type wlan show profile (use the one that your computer is using so look at the wifi thingy in thr right corner and itll have a name and use that). When you have the name of it just add it to wlan show profile. Ex: wlan show profile Fios-JTEVF and then add key=clear after that so it should look somewhat like this but yours is gonna have different wifi name. (wlan show profile Fios-JTEVF key=clear) and there you go :). The password will be to the right of "Key Content" and that's how you can see your wifi password from your router on your computer. if you have any problems add me on snapchat @ aloha.justinn and I will be more than happy to help you. :)

[@Anthony-kj3xw]

@@deathgamer8921 Thanks for the find :)

[@omnipotent1214]

ah, the webdriver has brought me in my chains here. how unspecific. how irrelevant.

[@Bm23CC]

ache tee tee pee - HTTP lol