Mirrors/hacktricks
2
0
Fork 0
mirror of https://github.com/carlospolop/hacktricks synced 2024-11-25 14:10:41 +00:00
Code Issues Projects Releases Packages Wiki Activity

GitBook: [master] one page and 3 assets modified

Browse source
This commit is contained in:
CPol 2020-12-23 10:59:42 +00:00 committed by gitbook-bot
parent db284cbd77
commit 05d9503f49
No known key found for this signature in database
GPG key ID: 07D2180C7B12D0FF
4 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
.gitbook/assets/image (406).png
View file

Binary file not shown.
Side by side Swipe Overlay

Before

Width:  |  Height:  |  Size: 357 KiB

After

Width:  |  Height:  |  Size: 151 KiB

BIN
.gitbook/assets/image (408).png Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 357 KiB

BIN
.gitbook/assets/image (409).png Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 140 KiB

16
forensics/pcaps-analysis/wireshark-tricks.md
View file

@ -38,8 +38,24 @@ You can add a column that show the Host HTTP header:
And a column that add the Server name from an initiating HTTPS connection \(**ssl.handshake.type == 1**\): And a column that add the Server name from an initiating HTTPS connection \(**ssl.handshake.type == 1**\):
![](../../.gitbook/assets/image%20%28407%29.png)
## Identifying local hostnames
### From DHCP
In current Wireshark instead of `bootp` you need to search for `DHCP`
![](../../.gitbook/assets/image%20%28409%29.png)
### From NBNS
![](../../.gitbook/assets/image%20%28406%29.png) ![](../../.gitbook/assets/image%20%28406%29.png)
## Decrypting TLS ## Decrypting TLS
### Decrypting https traffic with server private key ### Decrypting https traffic with server private key