Sniffing/Cracking Passwords using ARP Poisoning in Cain and Abel
(For the video tutorial scroll down) 

I’ve been doing some wireless sniffing lately, just for fun and figured I would post a detailed video and text tutorial on how to sniff packets using Cain and Abel. To start off, lets answer the question of what is a ‘packet’.

A packet is a formatted block of data carried by a packet mode computer across a network.

To put it simply, packets are pieces of data that fly around and get accepted or denied by routers and other communication devices. What we will be doing is ‘fooling’ all the computers on your wireless network into thinking that YOUR computer is the router, hence making all the data packets go through your computer. To do this we will be using a program called cain and abel. Just follow that link and download the application, I will go through it more in the video tutorial.

After we have intercepted the data packets, cain will attempt to analyze and decrypt them and if anyone on your network enters a password of some sort into a login box, those username and password packets will be transmitted back to your computer so that you can basically ‘crack’ those passwords. Sometimes they will show up as hashs and that will require you enter do some hash cracking which I will very briefly cover.  Most of the time however, they will show up as cleartext so that you can just copy and paste them into wherever they belong. And there you go.

 Okay, the following is going to be a brief outline of steps involved:

1. Open cain
2. Click on the sniffer tab and turn on sniffer (button next to open on the toolbar)
3. Make sure the hosts tab is selected down the bottom.
4. Right click > scan mac address’
5. Click on APR tab down the bottom
6. Click + sign and add your networks.
7. Start poisoning
8. Click on passwords down the bottom and wait for passwords to come in.

 

If you didn’t understand something, feel free to comment your question below or email me.

No Related Posts