How to view FTP usernames and passwords in Wireshark

Home > Search > How-to
  by

If the connection between the client and FTP server is not encrypted, Wireshark will show the username and password.

  1. Start a capture in Wireshark
  2. Connect to an FTP Server. Include your username and password in connection.
  3. Stop the capture in Wireshark.
  4. In the Wireshark filter, enter FTP.
  5. In the list of packets, the unencrypted username and password should be displayed.

 

On the other hand, if the connection between the client and FTP server is encrypted with a SSL/TLS certficate, Wireshark will not show the username and password.

 



Add a Comment




We will never share your name or email with anyone. Enter your email if you would like to be notified when we respond to your comment.




Please enter in the box below so that we can be sure you are a human.




Comments