OK.
So in this lesson, you learn how to use Wireshark filters when the victim connects to your fake access
point.
So first off, you need to open Wireshark by typing Wireshark in the terminal and here select wireless
interface double and zero and start capturing packets.
OK, now let's switch the victim machine and generate some traffic by going to an HTP website and try
to login using test for the username and let me in for the password and click the login button.
OK, so let's go back to the machine and stop the capturing process by clicking the red button.
And no, the first filter, which I like to use is DNS with the IP address, so I will type DNS and
IP add are equal equal and put the victim IP address.
This filter will show you which websites the victim is visiting and is useful when you want to perform
a phishing with that.
OK, now the next filter is free contains put the word from the website.
And for this example, I will use Bing.
This will show you if users from a fake access point are visiting Bing website.
And lastly, let's see how to locate the post packet, which contains the login credentials.
So I will type H-2B Request Method Equal, Equal and in caps post and click on the HTML form.
And here you can see the username and password.
So thanks for watching and I will see you next time.