THM Room: Wireshark: Traffic Analysis

Introduction

What?

Network sniffing and packet analysis with Wireshark.

Why?

• Analyse protocols and PCAPs.

• Packet analysis and finding the needle in the haystack.

• Traffic analysis and finding anomalies on the network.

How?

• Nmap scans

• ARP poisoning & on-path

• Identifying hosts

• Tunneling traffic

• Clear-text protocol analysis

• Encrypted protocol analysis

• Hunt clear-text credentials

• Firewall rules