hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Full Version: Packet Information
raman
i have a dump of packets logged by a packet sniffer. How can i read the information and passords in the packets cleanly.
it reads some thing like this
what is this all crap
[ps:80 pd:1354 seq:9179F900 ack:BC215E 6000010010]216.136.173.180:80 Dst:192.168.0.5:1359 tcpLen:0 Seq: 9179F900 [fSrpAu] 12 12 []
[ps:20 pd:1356 seq:20E1946E ack:BC5CD3 6000010010]216.136.173.180:20 Dst:192.168.0.5:1361 tcpLen:0 Seq: 20E1946E [fSrpAu] 12 12 []
[ps:80 pd:1356 seq:EA49F005 ack:512C5B 5000011000]203.94.243.89:80 Dst:192.168.0.6:1361 tcpLen:304 Seq: EA49F005 [fsrPAu] 18 18 [(HM_IsMenu) {^M^J^Idocument.write("<SCR" + "IPT LANGUAGE='JavaScript1.2' SRC='../images/HM_Arrays1.js' TYPE='text/javascript'><\/SCR" + "IPT>");^M^J^Idocument.write("<SCR" + "IPT LANGUAGE='JavaScript1.2' SRC='../images/HM_Script"+ HM_BrowserString +".js' TYPE='text/javascript'><\/SCR" + "IPT>");^M^J}^M^J^M^J^M^J//end]
[ps:1356 pd:80 seq:512C5B ack:EA49F135 5000011000]192.168.0.6:1361 Dst:203.94.243.89:80 tcpLen:247 Seq: 512C5B [fsrPAu] 18 18 [GET /images/HM_Arrays1.js HTTP/1.1^M^JAccept: */*^M^JReferer: http://delhi.mtnl.net.in/services/index.ht...ccept-Encoding: gzip, deflate^M^JUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows 98)^M^JHost: delhi.mtnl.net.in^M^JConnection: Keep-Alive^M^J^M^J]
[ps:80 pd:1351 seq:804071 ack:510619 5000010000]66.250.131.132:80 Dst:192.168.0.6:1356 tcpLen:0 Seq: 804071 [fsrpAu] 10 10 []
[ps:80 pd:1356 seq:EA49F135 ack:512D52 5000010000]203.94.243.89:80 Dst:192.168.0.6:1361 tcpLen
coder
user posted image

basically, all the data you want to look at (everything else is part of the packet frame) is at the end of packet frame...

if you look in the image above- you should see the order of information (and size in bytes) - good luck...

the packets you posted look like a GET and some Javascript? it's all in plaintext dry.gif
SgtRush
There aren't any passwords in the snippet you supplied. You can obtain clear text passwords sniffing the LAN, but unless you really just enjoy looking through pages of text. Download Cain and Able, its on this site somewhere in downloads. It will sniff the LAN for you and generate a list of passwords for you. No eye strain or headache from too much staring.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.