This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Sniffing application traffic attack"
From OWASP
Deleted user (talk | contribs) |
(Reverting to last version not containing links to www.texteltorc.com) |
||
| Line 1: | Line 1: | ||
| − | |||
==Description== | ==Description== | ||
Latest revision as of 18:30, 27 May 2009
Description
Sniffing application traffic simply means that the attacker is able to view network traffic and will try to steal credentials, confidential information, or other sensitive data.
Anyone with physical access to the network, whether it is switched or via a hub, is likely able to sniff the traffic. (See dsniff and arpspoof tools). Also, anyone with access to intermediate routers, firewalls, proxies, servers, or other networking gear may be able to see the traffic as well.
Examples
Related Threats
Related Attacks
Related Vulnerabilities
Related Countermeasures
This article is a stub. You can help OWASP by expanding it or discussing it on its Talk page.
