Password sniffing with Metasploit
Password sniffing is a special type of auxiliary module that passively listens on the network interface and looks for passwords sent over various protocols, such as FTP, IMAP, POP3, and SMB. It also provides an option to import previously dumped network traffic in .pcap format and look for credentials within.
Its auxiliary module name is auxiliary/sniffer/psnuffle, and it can be seen in the following screenshot:
Figure 4.22 – Running the 'psnuffle' auxiliary module
This sniffer module can be run with default settings without any explicit parameter configuration.
Moving on to the next section, we'll learn how to make use of the Shodan search engine along with the Metasploit Framework.
