Capture passwords using Wireshark in Kali Linux

Protocols such as HTTP, FTP and Telnet transmit username and password in Plaintext. If you have access to a router or gateway  through which the data is being forwarded, you can easily capture the username and password by using a packet capture tool like 'Wireshark'.

In this tutorial, we will use 'Wireshark' to capture username, password when a user is logging in to a website using HTTP protocol 

1)  Start Wireshark
Click Applications -> Kali Linux -> Top 10 Security Tools -> Wireshark

2) Select Interface and start Capture
Click Capture -> Interfaces . Select eth0 and press Start button.

Wireshark has now started capturing packets.

3) Tell Wireshark to show only http data.
In Filter: , write http

4) The screen shot below shows captured data. username 'shabbir' and password 'admin'.