net-creds Thoroughly sniff passwords and hashes from an interface or pcap file. Concatenates fragmented packets and does not rely on ports for service identification.
net-creds
Can Sniff:
+ URLs visited
+ POST loads sent
+ HTTP form logins/passwords
+ HTTP basic auth logins/passwords
+ HTTP searches
+ FTP logins/passwords
+ IRC logins/passwords
+ POP logins/passwords
+ IMAP logins/passwords
+ Telnet logins/passwords
+ SMTP logins/passwords
+ SNMP community string
+ NTLMv1/v2 all supported protocols: HTTP, SMB, LDAP, etc.
+ Kerberos
Usage:
git clone https://github.com/DanMcInerney/net-creds && cd net-creds pip install -r requirements.txt sudo python net-creds.py -i eth0 sudo python net-creds.py -f 192.168.1.1
Source: https://github.com/DanMcInerney