tcpdump
Captures network traffic hunting for cleartext credentials.
A command-line network traffic capturer. Once you have access to a box, sniffing an interface can reveal credentials, tokens or files travelling in clear text between internal services.
Family File analysis & reversing
Flags -i -w -A
Installation
sudo apt install -y tcpdumpUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- ApexProving Grounds Practice
- Cereal 1VulnHub
- NibblesProving Grounds Practice
- Symfonos 3VulnHub