Password sniffing is a technique used to extract passwords by monitoring network traffic. It can be done manually or with software, and can be a security threat. Passwords sent across a network are vulnerable, and hackers can use them to gain access to sensitive information. Network administrators use various techniques to combat password sniffing.
Password sniffing is a password harvesting technique that involves monitoring traffic on a network to extract information. Software to do this automatically is available from several companies and people can also do it manually or write their own software for a specific purpose. While not always with malicious intent, it can be a security threat and there are steps that can be taken to protect a network from sniffing.
Programs or devices can be used to track traffic as it moves through a network. They examine individual packets of data to extract what looks interesting, including data that contains passwords. Sometimes, passwords appear in plain text within the system, rather than encrypted, making it easier for the password sniffer to identify and match them to usernames. In other cases, a decryption program may be needed to extract passwords from a data stream.
Anytime a password is sent across a network, it is vulnerable to sniffing. People using dial-up access to reach a computer need to enter passwords, as do people accessing various network resources such as printers, in some cases. Computer users also enter passwords online to do everything from checking email to logging into a social networking account. All of these activities generate network traffic that can be vulnerable to sniffing.
People who engage in password sniffing usually collect passwords, generating a long list of known usernames and passwords for future use. Hackers, crackers, and other people interested in exploiting a system can sniff out passwords that could allow them to gain control and gain access to sensitive material. People can also use passwords to steal someone’s personal information. With this information in hand, it is possible to take over accounts and either assume the identity of a person or create a snarling mess that will take time to unravel.
Some malware and spyware come with applications that reveal passwords. These programs will collect data and transmit it as well as infect other computers in a network.
Network administrators, especially on large networks, use a variety of techniques to combat password sniffing. These can range from requiring all users to install and use software that scans for viruses, malware and other software exploits to restricting certain types of activity on a network to make it less vulnerable to attack. On public networks, such as those found in colleges and libraries, exploits can be a big problem as a single user with an infected computer can endanger the entire network.
Protect your devices with Threat Protection by NordVPN
