https://github.com/danmcinerney/net-creds

Sniffs sensitive data from interface or pcap
https://github.com/danmcinerney/net-creds

Last synced: about 19 hours ago
JSON representation

Sniffs sensitive data from interface or pcap

• Host: GitHub
• URL: https://github.com/danmcinerney/net-creds
• Owner: DanMcInerney
• License: gpl-3.0
• Created: 2015-01-07T18:47:46.000Z (about 10 years ago)
• Default Branch: master
• Last Pushed: 2023-11-02T10:46:03.000Z (about 1 year ago)
• Last Synced: 2024-10-29T17:47:44.288Z (3 months ago)
• Language: Python
• Size: 7.83 MB
• Stars: 1,693
• Watchers: 116
• Forks: 438
• Open Issues: 8
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-network-stuff - **1232**星

README

        
Thoroughly sniff passwords and hashes from an interface or pcap file. Concatenates fragmented packets and does not rely on ports for service identification. 

| Screenshots |

|:-----:|

| ![Screenie1](http://imgur.com/opQo7Bb.png) |

| ![Screenie2](http://imgur.com/Kl5I6Ju.png) |

### Sniffs

* URLs visited

* POST loads sent

* HTTP form logins/passwords

* HTTP basic auth logins/passwords

* HTTP searches

* FTP logins/passwords

* IRC logins/passwords

* POP logins/passwords

* IMAP logins/passwords

* Telnet logins/passwords

* SMTP logins/passwords

* SNMP community string

* NTLMv1/v2 all supported protocols: HTTP, SMB, LDAP, etc.

* Kerberos

### Examples

Auto-detect the interface to sniff

`sudo python net-creds.py`

Choose eth0 as the interface

`sudo python net-creds.py -i eth0`

Ignore packets to and from 192.168.0.2

`sudo python net-creds.py -f 192.168.0.2`

Read from pcap

`python net-creds.py -p pcapfile`

#### OS X

Credit to [epocs](https://github.com/epocs):

```bash

sudo easy_install pip

sudo pip install scapy

sudo pip install pcapy

brew install libdnet --with-python

mkdir -p /Users//Library/Python/2.7/lib/python/site-packages

echo 'import site; site.addsitedir("/usr/local/lib/python2.7/site-packages")' >> /Users//Library/Python/2.7/lib/python/site-packages/homebrew.pth

sudo pip install pypcap

brew tap brona/iproute2mac

brew install iproute2mac

```

Then replace line 74 '/sbin/ip' with '/usr/local/bin/ip'.

#### Thanks

* Laurent Gaffie

* psychomario