Sniffing passwords from same network(Lan) using Cain and Abel tool

Hello, friends today I am will tell you how to hack victim’s password if they are connected on the same network.  

I will tell you how simple HTTP and FTP passwords can be accessed across same LAN network.Just follow the steps and you are done.

First, install the tool Cain And Able form here.

About the tool Cain And Abel:

Cain & Abel is a password recovery tool made for Microsoft Operating Systems , which allows easy recovery of various kinds of passwords by sniffing the network . It also helps in cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncovering cached passwords and analyzing routing protocols. The program does not exploits any software vulnerabilities or bugs that could not be fixed with little effort. It covers some security aspects/weakness present in protocol’s standards, authentication methods and caching mechanisms; its main purpose is the simplified recovery of passwords and credentials from various sources . So in simple language Cain & Able is just a Password Sniffing Tool .

Just follow the steps given below :-

Step 1:-

First of all turn off the windows firewall or any other third party firewall so that all the packets are captured efficiently.

Step 2:-

Open Cain and Abel tool

Step 3:-

Go to -> Sniffer Tab and click on Configure in the main menu to configure your packet listening adapter.

Step 4:-

Choose the appropriate network adapter for your desired network that you want to sniff the packets for plain-text passwords. And hit Ok.

Step 5:-

Press the Green Adapter icon as shown below. This means that you just configured the adapter and now you are going to turn it ON.

Step 6:-

Now select the APR tab below as shown and now click on the right side upper panel area. When you press on that area the blue plus (“+”) icon will get enabled . Click on that blue plus (“+”) icon.

Step 7:-

Now we need to select the router`s IP address and click on ok . This means that we want to check every packet that is sent to router. If we select any IP address in our LAN network then we can listen to only that particular HOST on the network. Since the router responds to all the request of HOSTS connected in a LAN. Thus we can listen to all the HOSTs connected on the router.

Step 8:-

Now click the Yellow Circle icon as shown below . This means that we are going to start ARP poisoning.

Step 9:-

We can see that in the upper right panel there is an IP address of our router and when we press that Yellow Circle icon (button), it will perform ARP poisoning .

Step 10:-

Now just click on the password tab which is at the bottom. And that’s it we can see passwords of HTTP i.e. plain text session in our LAN network.

Note: While doing this practically you will observe that there is significant reduction in their network speed. This is because the ARP spoofing on the LAN network makes many fake packets advertising other’s host identity. This can also be used to make a DoS Attack on the LAN network as it makes many fake packets for processing thereby making unable for other HOST to create a request on the network.

Thanks For Reading If You Like This Information And Found It Useful Please Subscribe For Email Alerts 

        

Feel Free To Ask Any Kind Of Help