I have run Wireshark on my school but can i read passwords or a remote desktop IP or something? And which filters should i use? asked 02 Apr '13, 10:35  anony1 |
One Answer:
That depends on the network setup at your school. If they're still on steam powered technology like hubs (okay, not really steam powered, but it feels that way) then you might be able to capture packets of other computers. If there are switches, you can't unless you're able to configure a monitor session on the switch. But even if you capture some packets you're usually not going to see much in regard to remote desktop passwords since the protocols are all encrypted. There are also not filters that help with reading passwords from remote desktop protocols; the only passwords you could gather would be those of plain text protocols like FTP or POP. answered 02 Apr '13, 10:39  Jasper ♦♦
...as opposed to non-plain-text protocols such as, for example, FTP or POP over SSL. I.e., even nominally plain-text protocol might be encrypted by running them over SSL, so it'll be a bit hard to find passwords on the wire. (02 Apr '13, 11:16) Guy Harris ♦♦ |
what is your use case?