Sniffing Passwords Using Cain and Abel

Step 1: First download The Cain And Abel Application 
Website: Click Here.
Direct Download: Click Here.


Step 2: Now Install the Application And After that Open it.

It will look like this


Step 3: Click on the SNIFFER tab at top And the Host tab at the bottom. 

Now we should to configure the sniffer, you should choose what network device you want the sniffer to use (use one of the devices connected to the network that you want to monitor)


Step 4: Click Configure in the toolbar and you will see this Configuration Dialog.


Choose your network device.

 


Step 5: Now Start Sniffing on the selected Device. For that You have to click on the sniffing button (1). Then on '+' button (2).



When you click on the '+' button Mac Address Scanner menu will pop-up. This will sniff for devices in the range you set.




The easiest thing to do to select 'All host in my Subnet' and then Click OK.


Now it will start scanning the network for devices on that network.

The devices found will be shown up in the background during the scan.


Step 6: Now we Should Start the ARP POISONING. 


For that, First Click on the ARP tab.
Keep the SNIFFER tab selected too.Now in the left column click ARP and the + should be blue. Click on it.


Now a menu like this will pop-up.
 



The left side column is where you select the ROUTER.
Mine for example is 192.168.1.1.


After selecting that the Other devices on the network will show up in the right hand column.
Select them all or what ever IP's you want to sniff for traffic.




Step 7: Now we should start POISONING the devices.
So Click the Toxic icon next to the Sniffer button.


All the status's should turn to poisoning and in the lower cells you might 
start seeing traffic going in and out.




Step 8: After seeing some traffic flowing in and out, You should look for passwords.
So now on the lower tab click PASSWORD. 
Now the password list will show up. On the right hand side it will show up what type od password it is. For example HTML5, Pop3 (email) and more. 

Here is the Example Log I Got.



As you can see it's a little messy but you can see in one of the logs the 
username HACKFORUMS and the password is TEST1234.
If you also take note the Userfeild and Passfeild are 
username= and password= which may make it easier to filterer when you get more logs.




Enjoy Sniffing :)