Re: dsniff-like tool?

Greetings!

Andrew Stewart wrote:
> Does anyone know of a tool with credential sniffing capabilities similar

http://phenoelit.de/phoss/

"PHoss is a sniffer designed to find HTTP, FTP, LDAP, Telnet, IMAP4 and POP3 logins on the wire. It also sniffs the VNC challange/response handshake."
Especially in non-switchd networks quite an eye-opener. Lists nicely protocol, name and password for each appropriate packet coming along.

Personal experience with Phenoelit: some of them tried to social engineer into our CeBit network few years ago (out of sportsmanship I figure) but ended up getting social engineered themselves as they handed me their real, private "business card". But I guess they got better in that by now... (Greetings!) ;-)

Bye

Volker Tanger
IT-Security Consulting

-- 

discon gmbh
Wrangelstraße 100
D-10997 Berlin

Telefon  (030) 6104-3307
Telefax  (030) 6104-3461

volker.tanger@discon.de
http://www.discon.de/



----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek