However, plain text password is quite an outdated method, since most of the newer protocols do not transfer password as a plain text, for obvious security flaws. Oh yes! There is nothing as satisfying as finding a plain text password in some traffic that connects you to a service on the network. OK, Let’s discuss some actions that a hacker might conduct, doing so by sniffing network traffic and analyzing it! In most of the cases the purpose of all of this effort is finding the data that he is interested in, and how he can get it (For more information, see Cyber Kill Chain). When a hacker wants to attack a network - first of all he needs to learn it: he identifies weak spots as well as network topology, lateral movement, checks its privileges and even more, depending on the case. In this article I am going to explain what it means to think like a hacker. I have always believed that in order to catch one - you have to think like one! Therefore, I suggest that you look over a PCAP like a hacker would. The analyst must be familiar with so many different protocols, vectors and tools, that sometimes make it feel almost impossible to find out what is actually wrong. If you think about it for a moment, it is not an easy task at all. Part of the analyst’s job is to analyze suspicious traffic in order to trace offensive activity on a network. A significant number of employees in the Cyber Security industry are starting their way as Analysts.

You might learn something very interesting that may also be helpful for you somewhere in your future career!Īs you might know, PCAP files contain network traffic data, usually captured by a network sniffer such as Wiresharkor Tcpdump. Even if you are not, and you are just starting your way in the Cyber Security world, I recommend that you keep reading.

If you clicked on this article, you are probably familiar with PCAP files. Want to be a better Cyber Analyst? Analyze a PCAP like a Hacker!

What is wireshark password for analyst