Wireshark: Notes

Wireshark lets you dive deep into your network traffic - free and open source.

Install wireshark on Windows using winget

PS C:\Users\tuyen> winget install WiresharkFoundation.Wireshark

Install wireshark-cli on ArchLinux

[tuyen@minipc ~]$ sudo pacman -Sy wireshark-cli

CTRL + SHIFT + O : 

Apply filter

ip.src == 10.10.67.199
ip.dst == 10.10.15.52
tcp.port == 80
udp.port == 67
http.request.method == GET
http.request.method == POST

Extract zip file from .pcap file

Practice

>>> THM | 25 Days of Cyber Security - Day 7

>>> THM | Advent of Cyber 2 - Task 12 (Day 7)

>>> THM | Overpass 2 - Task 1

>>> THM | Startup

>>> Wireshare | THM (for subsribers only)