Wireshark Hacking tutorial : Wireshark is a complete package filled with network analysis tools. Wireshark is not only a packet sniffer but also a packet analyzer, password hacker, and a firewall. It can also detect any denial of service attack on your network and can identify possible hacker. Wireshark is also used sometimes as a tool to detect if anyone is spying on you.
In this Wireshark Hacking tutorial, we will discuss how Wireshark can be used in multiple ways. As already discussed, Wireshark can be used to capture and detect passwords as well as to secure your network from outside intruders. So lets start with our Wireshark tutorial.
Installing Wireshark:
Wireshark is available for free of cost. You can download Wireshark from its official website by clicking here. Fir Linux or Ubuntu users, you can find Wireshark packages on the above link of its homepage. After Downloading Wireshark, install it in your system and launch the application.
Jul 21, 2015 Many hackers aroung the world are using Wireshark to get passwords. Steps to hack Wifi using Wireshark. 1: How to setup Wireshark installing Wireshark. Wireshark is very easy to install. Just download the software and follow the install instructions. You may face some problems while sniffing data. It may be due to your network card. Now we know that the MAC address is used to make sure that the packet goes in the right direction, so each packet has a source MAC and a destination MAC, and it This website uses cookies and other tracking technology to analyse traffic, personalise ads and learn how we can improve the experience for our visitors and customers.
- Jun 23, 2020 MAC flooding is a network sniffing technique that floods the switch MAC table with fake MAC addresses. This leads to overloading the switch memory and makes it act as a hub. Once the switch has been compromised, it sends the broadcast messages to all computers on a network. This makes it possible to sniff data packets as they sent on the network.
- Nov 19, 2016 How to capture Wi-Fi packets using Wireshark on a Macbook. Capture and Crack WPA Handshake using Aircrack - WiFi Security with Kali Linux - Pranshu Bajpai.
Wireshark Hacking tutorial:
Step 1: Capturing Packets:
First of all, we will learn to capture packets from Wireshark. After downloading and installing Wireshark, launch the application. Click the name of an Interface on then Interface list as shown below. Interface list contains your network adapters. If you are connected to a WiFi then select a Wireless Lan Adapter.
After selecting an Interface name, you can see the packets starting to show on your screen. These packets are being captured by Wireshark in real-time. You can stop packet capturing by clicking on the Stop button( A big Red Square button on the top left corner).
These packets are being captured from your network device. That means that these packets belongs to you and are coming or going out of your system. To capture the packets of other users connected on your Wireless network, enable promiscuous mode on your capture options.
Note: You can also see different color coding on your capture packets. These packets are color coded by default. For example: green is TCP traffic, dark blue is DNS traffic, light blue is UDP traffic, and black is TCP packets with problems. You can also add your custom color code by editing coloring mode in menu.
You can save these captured packets for later use. To save a packet, click on File and go to Export Packet Dissections. To open a Packet file, go to the main page and click on open.
Step 2: Filtering Packets:
Filtering is used to identify a specific packet. For example, you can filter a traffic received by your browser or from an application. You can also filter packets going through protocols such as DNS, HTTP or TCP.
You can also right-click on a packet and select follow TCP stream. This will automatically add a filter of that packet and Wireshark will show all the packets related to it.
Step 3: Inspecting Packets
Inspecting a packet helps you to analyze its details. This will let you know the origin of the packet and other details. To do so, click on a packet to select it and its details will be shown.
Right-click on any packet that looks important and select filter. This will show you all the related packets that have been captured.
This is just a basic Wireshark Hacking tutorial in which we discussed about capturing, filtering and analyzing packets. With Wireshark, you can secure your network, hack a network and even implement different network protocols.
Also Read: Hack Wifi Using Wireshark
This isn’t hacking. This is just information gathering
Maybe someone scared you claiming to know your IP address. On the other hand, you could be the one trying to scare a friend by getting his IP address. Or, maybe, you just want to hear the truth about hacking IP address. Look no further, because in this guide we will give you all the truth. We will explain you how to hack IP addresses by following this agenda:
- A quick introduction to what IP addresses are
- How to hack IP addresses
- How hackers find out an IP address
- What can a hacker do when he knows your IP address
After reading this guide, you will be able to find out the IP address of potentially anyone, silently.
Is this legal?
Under most circumstances, it is. Knowing someone’s IP address is part of a “normal” communication over the Internet, so there is no problem in doing that. However, if you use the IP address to violate someone else’s PC, you are committing a crime under many jurisdictions. We do not endorse such activity. Everything you read should be tried on systems you own and control personally. We are not responsible for your actions.
Furthermore, remember that this is not legal advice. We are IT guys, not lawyers. If you are looking for legal advice it’s better to call your attorney.
Before Hack IP addresses
Before we start hacking, we should spend a few words on IP addresses. In IT, and in hacking specifically, never do anything without knowing what you are doing. Indeed, this concept is important here. A lot of people talk about “hack IP addresses” without even knowing what an IP address is. This can lead to unjustified fear among the ones being hacked or exaggerated glory among those who hack. What “hack an IP address” really mean? What can you do with that? Now, we are going to demystify IP address hacking.
What is an IP address?
An IP address is nothing more than a numeric identifier. It identifies a PC, smartphone, or any other device in a network, like the Internet. You can think of it like a snail mail address. If I know your snail mail address I know where you are, and I can send you some letters. With an IP address, I can know (roughly) where your device is, and send you some Internet traffic.
In other words, you are identified by your IP address over the Internet. Typically, your Internet provider assigns a public IP address to your router in your house. When your devices in your home network want to send traffic over the Internet, they will use that public IP address (shared among all of them).
The communication over the Internet happens with packets. Each piece of data is put in a packet, you can think of it as a letter. On the envelope, you always write source and destination IP addresses. The Internet will take care of delivering the packet to the right destination. Now, as you can see, if you send traffic out you will write your IP as source IP. This is the only way the other part can know it, and send some traffic back.
Article continues below the advertisement
Do we really need to use our real IP address as source?
Of course! Imagine you want to download a movie, see a web page, or anything else you do over the Internet. You contact a third-party server, which sends you the content you requested. It needs to know where to send it, so it needs to know your IP.
Read more about IP addresses in this detailed article.
Am I in danger?
It depends, but in most cases, you aren’t. As from the paragraph above, knowing someone else’s IP is legitimate. You need it to send traffic back. What if your IP address ends up in the wrong hands? Just by knowing your IP address, nobody can harm you. However, they can start to scan your PC and see if you have vulnerabilities they can use to gain access to your data. We will get to that later.
How to find out someone’s IP address?
In the following section, we are going to cover an out-of-the-box technique. However, it relies on a simple principle: your victim needs to send you some traffic. If he does that, boom, you have his IP address. Your PC already learns such an IP address, but it doesn’t show it to you. We will see how to see it.
The Proven Way to Hack IP addresses
Some misconceptions and old techniques
The Internet is full of poor content about hacking IP addresses. You might read about hacking IP addresses with Skype and get excited about that, but since 2017 this is not possible anymore. So, for this article, we are going to use the best way to hack an IP address. We are going to use the only way that depends uniquely on you, not third-party services. Because of that, it will always work.
Furthermore, it is simple to apply and easy to use.
What’s behind our technique
The idea behind our technique is simple. You basically give your victim a link: they can open it with their mobile, PC, or any sort of device. On that link, they will see an image of your choice (we recommend using a fun one). However, your system will also track automatically their IP address and more information, like the browser they are using and their operating system.
While this happens, they will see the fun image and have a laugh about it. They have no way of knowing that you are tracking their IP address.
Step #1 – Register a website (for free!)
You want to give your victim a valid link to click, and it must be valid online. Therefore, we need to register a website. There are a lot of free services online to register a website, and among them, we have chosen x10 hosting. Go to their website and register a new account.
As a first thing, they will ask you to select a domain image. Use a credible one for the kind of images you want to share.
Continue with the registration and verify your email. Once you complete the process, you will end up on the homepage where you will have to create a website. Now you are going to say “Wait, I thought we already created that!”… well, sort of. Until now, we created the name. Now, we have to prepare the software running behind it.
Step #2 – Creating the website itself
The home will look like the one below. From there, just click the green Add Website button on the top right.
A quick wizard will open. From there, we have to tune a few items. Before everything else, select “Custom Website” website. Then, as a website name, write something that reminds the website, like its domain name. As the last thing, leave the address path empty. Then, click on Add Website.
Create the website, then select “Continue to my website” on the next page. Congratulation, we are almost there!
Step #3 – Download the IPFinder script
Now your website is ready. All we need to do is uploading the script that will take care of saving IP addresses and delivering the images to the user. Fortunately, you don’t need to write that script on your own: instead, we did it for you. It uses a PHP file, three HTAccess files, and two folders.
Our IPFinder script comes in a useful zip package that you can download for free by using the link below. Just click on it and download the zip file.
Now that you have it, don’t even unzip it. We will do that on the website directly: move on to the next step.
Step #4 – Upload the IPFinder Script
From the website pages, select the File Manager option. This will open a new window that looks similar to Explorer in Windows. A website is just a collection of files on a public server. With this File Manager, you can have a look at those files. To them, we need to add our script.
Once you are in the file manager, select Upload (1). This will open a new window, where you can click “Browse” and search for the file you downloaded. Select that compressed file (ipfinder.zip) and wait for the upload to complete. Then, close this window and click Reload (2) in the previous window.
Now you should see a new file in the list, right below “cgi-bin”. This is our zipped package containing IPFinder, and we just need to extract it.
Wireshark Mac Address
Step #5 – Extract the IPFinder
Select the ipfinder.zip so that its background turns blue. Then, from the top menu, select Extract.
A new window will pop-up. Just click on Extract File(s) without changing anything. Then, wait for the process to finish, and, as soon as it does, click the Close button. You will have some more files and folders on your list. In case you don’t, just hit the Reload button as we did previously.
At this point, I recommend you to delete the ipfinder.zip file. You don’t need it anymore, as we have extracted its content. So, just click it and then click the delete button at the top. This step is not mandatory, but it is a good practice.
Step #6 – Adding images
Our IPFinder comes without images. However, it is a script that shows an image and logs the IP of the viewer. Therefore, you need to add your own images. So, find a jpeg image that you think would work for this purpose. At the moment, our script only supports JPEG/JPG images. Once you have that image, rename it with a simple name without spaces. Then, double-click on the images folder to view its content.
Once you are in, you will see only a .htaccess file. That’s OK, now upload the image the same way we uploaded the IPFinder script. For example, we will be using an image named meme.jpg. Now click “Up One Level” to return to the main folder.
Step 7# – Using IPFinder
Now your IPFinder is ready to go. How do we use it? It is very simple, as it automatically creates the URL we need. Your URL to share with your victims will be something like this one.
In this URL, each part is customizable.
- The domain name is the name of your website, the one you selected when you created the account. You won’t be able to change this. In our case, this is “coolimages”.
- The image name is the name of the picture you uploaded, so in our case, this is “meme.jpg”
- The user ID is something you should select carefully. Here you can write any combination of letters and numbers you want. Now we will see how to use it
Selecting the User ID
IPFinder will save a new text file for each victim that sees the image in the log folder. That file contains the date, time, and the User ID you specify. The purpose of this field is to let you differentiate between users. Think about it, what if you want to give the link to multiple people? How can you know which IP corresponds to which person? You cant. With this approach, you would send to John the link to /meme.jpg/john and to Alice the link to /meme.jpg/alice. They will both see the same picture, but you will log their IPs separately.
Hack IP addresses, getting the results
Browse the log folder. You will see some text files with the names explained above. Open any of them and read their content (select it and click Edit). In each, you will see something like this.
Note that for privacy we have hidden some parts of the IP address and some parts of the browser info in this example. However, from your script, you will get the entire IP address and the full browser information.
What can you do with hacked IP addresses?
At this point, you have your IP finder in place. You shared some images, thus getting some IP. You can know truly hack IP addresses, but you are still wondering what can someone do with IP addresses. On the other hand, you might be the one who believes to be hacked, and you want to know if you are in real danger. Look no further, here we will tell you the ultimate truth about what happens after you hack IP addresses.
Hack IP addresses to scare people
A lot of self-proclaimed hackers hack IP addresses just to scare people. They contact the person and tell them they know their IP address, and maybe their browser. A normal PC user will believe they have accessed their PC, how would they know which browser they use otherwise? So, people get scared and start believing in the hacker.
I’ve heard stories about “hackers” who managed to extort money from someone with this approach. They basically make them believe they had access to their data and threatened to share some personal pictures or something like that. The truth is, they didn’t even know if those pictures really existed. However, they approached everyone with the same words. As a result, they would scare the hell out of anyone holding such kind of pictures. Of course, such activity is illegal.
Geolocating you
If you get someone’s IP address, you can geolocate it very approximately. The location will be a few square kilometers accurate in urban areas, and a few dozens square kilometers accurate in rural areas. This is a rule of thumb and might vary, but you will be never accurate enough.
Only your service provider, and thus the police, can locate you precisely with your home address. For the others, you need to get by with only knowing the city or county.
Truly gain access to the device or to personal data
If someone knows your IP address, he can scan you. This means he can try to detect the system you are running and your vulnerabilities. Now, since the public IP address of yours is on your home router, they will do that for your router. They will gain access to your router and, from that, they will adopt the same approach to gain access to your PC.
This process is long and complex and requires a skilled hacker. However, it always follows the same guidelines.
- Find exposed services (with nmap) and try to detect the hardware and software version with the TCP signature
- Look for common exploits on the exposed services, or for that specific hardware/software
- Try to gain access with brute force
- Try to create a custom exploit
Of course, the fourth step is so hard that many hackers will simply give up. That step if for someone with skills and budget that wants to hack specifically you.
Wireshark Mac Address Filter
How can I defend myself?
In many connections, rebooting your router will change your public IP address. That’s it. If a hacker was attacking you, they will have to find your IP again.
Furthermore, you can increase the level of security by using a VPN or a proxy chain like TOR. In this case, you basically contact a server you trust (maybe own) somewhere on the Internet. Then, that server makes requests on the web for you. In case someone tracks your IP address, they will track the IP address of that server. This is for a whole new article, however.
Conclusion
In this article, we have presented how to hack IP addresses. If you followed our guide carefully, you have now a website you can use to hack IP addresses silently. You also know what to do with such addresses, and hackers do with them. Now it’s up to you! Go out there and practice this technique, but be always conscious of what you’re doing.
Wireshark Filter Ip Address
What are your thoughts on hack IP addresses? Do you feel safe? Did you manage to scare a friend of yours? What would you like to learn after this? Just let me know in the comments!