SecurityXploded.com
SecurityTrainings
Mailing List Join us on Google+ Twitter facebook RSS Feeds
Password Sniffer Spy : Free Tool to Sniff and Capture HTTP/FTP/POP3/SMTP/IMAP Passwords | www.SecurityXploded.com
 
 
 
PasswordSnifferSpy
 
 
 
See Also
 
 
 
 
Contents
 
 
About

Password Sniffer Spy is the all-in-one Password Sniffing Tool to capture Email, Web and FTP login passwords passing through the network.

It automatically detects the login packets on network for various protocols and instantly decodes the passwords. Here is the list of supported protocols,

  • HTTP (BASIC authentication)
  • FTP
  • POP3
  • IMAP
  • SMTP

In addition to recovering your own lost passwords, you can use this tool in following scenarios,

  • Run it on Gateway System where all of your network's traffic pass through.
  • In MITM Attack, run it on middle system to capture the Passwords from target system.
  • On Multi-user System, run it under Administrator account to silently capture passwords for all the users.

It includes Installer which installs the Winpcap, network capture driver required for sniffing. For Windows 8, first you have to manually install Winpcap driver (in Windows 7 Compatibility mode) and then run our installer to install only Password Sniffer Spy.


It works on both 32-bit & 64-bit platforms starting from Windows XP to Windows 8.

 
 
 
Features
  • All-in-one Tool to Sniff & Capture Email, Web & FTP Login Passwords.
  • Recover passwords for protocols such as HTTP, FTP POP3, IMAP, SMTP.
  • Recover password of any length and complexity.
  • Backup the captured password list to HTML/XML/Text/CSV file
  • Easier and faster to use with its enhanced user friendly GUI interface.
  • Support for local Installation and uninstallation of the software.
 
 
 
Requirements
PasswordSnifferSpy requires Winpcap (http://www.winpcap.org) - industry standard packet capture library for Windows. By default latest version of Winpcap (as of this writing v4.1.2) is installed automatically during the installation of Password Sniffer Spy.

However if you don't want it, you can uncheck it during installation and later install the latest version manually.
 
 
 
Installation & Uninstallation

PasswordSnifferSpy comes with Installer which install all the required softwares along with main software so you do not have to worry about separately installing any of the dependent softwares.

It has intuitive setup wizard which guides you through series of steps in completion of installation.

 
Installation on Windows 8
  • For Windows 8, you need to first manually install Winpcap driver (included in zip file) in 'Windows 7 Compatibility mode.'
  • Follow the instructions mentioned in this link
  • After that install 'Password Sniffer Spy' without installing Winpcap (by unchecking Winpcap Driver option)
  • That's all, now you are ready for sniffing :)
 
At any point of time, you can uninstall the product using the Uninstaller located at following location (by default)
 
[Windows 32 bit]
C:\Program Files\SecurityXploded\PasswordSnifferSpy

[Windows 64 bit]
C:\Program Files (x86)\SecurityXploded\PasswordSnifferSpy
 
 
 
How to Use?
Here is the detailed information on how to effectively use Password Sniffer Spy to capture the passwords flowing through the wire.
  • Launch the 'Password Sniffer Spy' after installation.
  • Select the right 'network interface' for sniffing the network packets. If you don't know then you can experiment with each of them and see which one works !
  • Then click on 'Start Sniffing' button and it will start sniffing operation
  • You will see passwords being displayed as they are captured from network traffic as shown in the screenshot below.
  • You can now stop the recovery operation and save the recovered password list to HTML/XML/Text/CSV file by clicking on 'Export' button and then select the type of file from the drop down box of 'Save File Dialog'.
For Windows 8, you need to install Winpcap driver manually as mentioned here
 
 
 
Screenshots
Screenshot 1:PasswordSnifferSpy is showing the captured passwords.
 
PasswordSnifferSpy showing recovered passwords
 
 
Screenshot 2:  Captured Password Report in HTML format
 
Exported IM Accounts to HTML
 
 
 
Troubleshooting

PasswordSnifferSpy depends upon Winpcap packet capturing library. So if you have not installed it earlier or unchecked it during the Installation of PasswordSnifferSpy then you will see the error message like below,

"This application has failed to start because wpcap.dll was not found. Re-installing the application may fix the problem"

In such case you can run the installation of PasswordSnifferSpy again (make sure Winpcap option is selected) which will install the Winpcap library on your system. After that you should be able to run PasswordSnifferSpy without above mentioned problem.

For Windows 8, follow the instructions here

 
 
 
Release History
Version 2.0 :  12th Jan 2014
New feature to store catpured password list in CSV (Comma-Seperated Values) File Format.
 
Version 1.5 :  18th Apr 2013
Added right click context menu to quickly copy the password from the displayed List
 
Version 1.0 :  26th Feb 2013
First public release of PasswordSnifferSpy
 
 
 
Disclaimer
PasswordSnifferSpy is designed to recover the lost passwords and to help penetration testers.

Like any tool its use either good or bad, depends upon the user who uses it. However Author or SecurityXploded is not responsible for any damage caused due to misuse of this tool.

Read complete License & Disclaimer terms here.
 
 
 
Download
FREE Download Password Sniffer Spy v2.0

License: Freeware
Platform: Windows XP, 2003, Vista, Windows 7, Windows 8

Download
 
 
 
See Also