Question about password sniffer.

[evertking]

Don't really know where to post questions on usage.. But how should you use the password sniffer? And does it work on android phones as the target? Does it check for stored passwords?
Also, where can I fi d the irc chatroom as I guess that is the place to find answers to questions llike these?

[tajnymag]

Password sniffer doesn't check for stored passwords. It checks for any non-encrypted login submition while you're capturing the network traffic.

[fat-tire]

@evertking basically it "listens" on the network for passwords being sent "in the clear" (not encrypted) and collects them. this article might give you some background on what it's doing... it is a real reminder that you should use https rather than http (+ SSL/TLS for non web-traffic) whenever possible because otherwise your traffic is vulnerable to being intercepted in transit.

Take a look at the links at the bottom of this tutorial for more info on why encryption is an absolute necessity for any type of transmission where you have some desire for privacy/security.

[gustavo-iniguez-goya]

@evertking , if you still have questions on this matter, feel free to open the issue again. The irc chatroom is this: https://webchat.freenode.net/?channels=csploit