Sunday, June 23. 2013

Wireshark und POP3 Filter

Posted by Michael in Allgemeines
Comments (0) | Trackbacks (0)
Hallo,

manchmal muss man den Leuten einfach mal zeigen - wie "unsicher" unverschlüsselte PW´s sind.

Nichts einfacher als das :

Wireshark an den Start gerollt - Monitor Port zum Internet böse gemacht und den passenden Filter gesetzt :


tcp.dstport == 110 and pop.request.command == "PASS"||pop.request.command == "USER"


Man kann natürlich auch noch auf POP3 (110) direkt auf dem Capture Filter setzen - dann speichert er die "Zusatz" Parameter nicht zwischen - aber man will ja nur mal "schnell" was zeigen...

Das Ergebnis in der Anzeige erzeugt einfach immer wieder "erstaunen"
 

Trackbacks
Trackback specific URI for this entry

No Trackbacks

Comments
Display comments as (Linear | Threaded)

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.
E-Mail addresses will not be displayed and will only be used for E-Mail notifications.
To leave a comment you must approve it via e-mail, which will be sent to your address after submission.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA