Being the MITM and capturing traffic with Wireshark
Ettercap can detect when relevant information such as passwords is transmitted through it. However, it is often not enough to intercept a set of credentials when performing a penetration test, we might be looking for other information like credit card numbers, social security numbers, names, pictures, or documents. It is therefore useful to have a tool that can listen to all the traffic in the network so that we can save and analyze it later; this tool is a sniffer and the best one for our purposes is Wireshark and it is included in Kali Linux..
In this recipe, we will use Wireshark to capture all the packets sent between the client and the server in order to obtain information.
Getting ready
We need to have MITM working before starting this recipe.
How to do it...
Run Wireshark from the middle of the Windows client and
vulnerable_vm
from Kali's Applications menu | Sniffing & Spoofing or from the terminal run:wireshark
When Wireshark loads...