Link to home
Start Free TrialLog in
Avatar of alg205
alg205Flag for United States of America

asked on

Capture text or passwords

I have a network security project I am doing for a class that I am taking. The assignment is to capture text or passwords in the open (unsecured) and encrypted (e.g. SSL) and show the difference between the two. The bonus challenge is to setup a proxy with a self signed SSL certificate and capture and view all traffic that is passing through the proxy Encrypted and open. I have squid proxy (I am new to squid) setup on Ubuntu and traffic is passing through the proxy without problem. I also have wire shark, Cisco switch with port spanning, and a Cisco 2610 router(i was thinking about WCCP). With the current resources or another free solution what is the best way to go about doing this project. I will have to present screen shots of the entire process, and show the encrypted and the unencrypted traffic. I want to accomplish the bonus/challenge as well but I will start on the required task first. Your help is appreciated.
SOLUTION
Avatar of big_daddy0690
big_daddy0690
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of alg205

ASKER

Is fiddler capable of capturing plain text or anything sent in the clear and can be easily read or reassembled?
Yes. It will also capture and decrypt ssl communication. You should read the FAQ on their website.

Fiddler2.com
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of alg205

ASKER

Thank you both. I have fiddler running, but I will be using Squid squid for my presentation since its a well known proxy.