Wireshark

Network protocol analyzer for packet capture and inspection

IntermediateInteractive Dual Perspective

Wireshark is the world's foremost network protocol analyzer. It lets you capture and interactively browse traffic running on a computer network, performing deep inspection of hundreds of protocols.

🔴 RED TEAM Perspective

Capture unencrypted credentials, analyze malicious traffic patterns, identify network weaknesses, and intercept sensitive data in transit.

🔵 BLUE TEAM Perspective

Detect anomalies, investigate security incidents, analyze malware C2 communications, and validate encryption is working properly.

Wireshark Packet Analysis Center

Real-time network protocol analyzer - Capture, filter, and inspect traffic from attacker and defender perspectives

Total Packets

Suspicious

Malicious

Display Filters

Packet List (0)

Click "Start Capture" to begin packet analysis

Packet Details

Select a packet from the list to view details

🔴 RED TEAM: Packet Sniffing

▸Credential Harvesting: Capture unencrypted passwords (HTTP, FTP, Telnet)
▸Session Hijacking: Steal cookies and tokens from network traffic
▸Reconnaissance: Map network topology and identify targets
▸MitM Setup: Identify protocols vulnerable to interception

🔵 BLUE TEAM: Network Defense

▸Threat Detection: Identify malicious traffic patterns and C2 beacons
▸Protocol Analysis: Detect protocol misuse and tunneling attempts
▸Data Exfiltration: Monitor for unusual outbound transfers
▸Forensics: Capture evidence for incident response

Wireshark

Theory & Documentation

What is Wireshark?

🔴 RED TEAM Perspective

🔵 BLUE TEAM Perspective

Packet Analysis & Protocols

Filtering Techniques

Defense & Detection Use Cases