Extracting Login Credentials from HTTP Traffic

Description

In this project, I use Wireshark to capture and inspect unencrypted HTTP traffic, focusing on how sensitive data, such as login credentials, can be exposed when transmitted over non-HTTPS connections.

Languages and Utilities Used

• Wireshark (4.4.3)
• Test HTTP Website (http://testphp.vulnweb.com/login.php)

Environments Used

• Windows 11 (24H2)
• PfSense (Version 2.7.2)

Program walk-through:

Launch Wireshark:


Capture Traffic:


Launch the Website & Enter Login Info:


Filter and Inspect HTTP Traffic:


Locate HTTP POST request:


Open HTML Form URL Encoded & Extract Login Credentials: