‫So let's have a look at the network sniffing methods first.
‫We're going to learn how to listen to the network traffic and how to use some tools, such as TCPDUMP
‫and Wireshark.
‫During the penetration test, we listen to the network traffic for many good reasons.
‫First of all, it's possible to obtain the clear text critical information such as usernames, passwords,
‫instant messages, emails and all that.
‫We can check to see if the scans were correctly.
‫And some controls can be seen by listening to the network interface, such as if the scan parameters
‫are set correctly, packets are properly exported from the network interface and responses are received.
‫Listening to the traffic using passive scan methods, we can collect information about IP addresses,
‫services running on server systems and protocols and technologies used in network infrastructures et
‫etc..