212-82: Certified Cybersecurity TechnicianDemo

By ECCouncil · Question Mode

QuestionQ102

Network Monitoring and Analysis

An attacker captured a user's login credentials for the moviescope website using tcpdump. You have been tasked with analyzing the captured traffic file, credsniff.pcapng, located in the Pictures folder of Attacker Machine-1, in order to determine the credentials that were captured.

  • A ronaldo/SocCer#456
  • B neymar/Football!789
  • C messi/DdiggEr@123
  • D mbappe/KickGoal$246
Explanation

Analyzing the credsniff.pcapng capture in Wireshark and following the TCP/HTTP stream for the HTTP POST request submitted to the moviescope.com login page reveals the plaintext username and password fields, since the site transmits authentication data unencrypted. Reconstructing that stream exposes the captured login pair as messi/DdiggEr@123.

Community Discussion

No comments yet. Be the first to start the discussion!