ICT 202 Cyber SecurityLab 2: Capturing Usernames and Passwords using WiresharkLab Title: Capturing Usernames and Passwords using Wireshark Objective of this lab:The basic purpose of this lab is to use...

ICT 202 Cyber SecurityLab 2: Capturing Usernames and Passwords using WiresharkLab Title: Capturing Usernames and Passwords using Wireshark Objective of this lab:The basic purpose of this lab is to use Wireshark to capture usernames and passwords for protocols (like HTTP, FTP) that do not use encryption.Instructions:• Read carefully before starting the lab.• These exercises are to be done individually.• You are supposed to provide the answers to the questions listed at the end of this document and upload the completed report with screenshots and brief explanation to moodle.• Avoid plagiarism by copying from the Internet or from your peers. You may refer to source/ text but you must paraphrase the original work. Your submitted work should be written by yourself.• Total Marks = 10• Weightage = 2.5%• Deadline to submit your report is by 5pm Sunday 11 April.Capturing Username and Passwords using Wireshark1. Over Hyper Text Transfer Protocol (HTTP)Your task is to capture username and password that is entered on a website that uses HTTP. Remember that HTTP does not provide security and usernames and passwords are sent in cleartext (i.e., with no encryption). Follow the steps given below:a. Start capturing packets with Wireshark and in your browser enter the following URLhttp://testphp.vulnweb.com/login.phpb. Enter your first name as username and last name as password and then press login.ICT 202 Cyber SecurityLab 2: Capturing Usernames and Passwords using Wiresharkc. Stop packets capturing by Wireshark and search for HTTP Post method that contains the username and password that is sent by your browser. You have to submit the screenshot of that HTTP message. Your first name and last name should be clearly visible in the screenshot.(5 marks)Remember that HTTPs is commonly used these days as it provides encryption. More details on this will be provided later in the unit.2. Over File Transfer Protocol (FTP)FTP like HTTP also sends the usernames and passwords in cleartext. Let’s capture them using Wireshark. Follow the steps given belowa. Start capturing packets via Wireshark and from the command prompt in Windows enter the following commandftp ftp mcafee.comEnter username as anonymous (do not enter any other text for username) and your firstname as the password and then press enter. See the screenshot given belowb. Stop capturing packets via Wireshark and search for FTP request message that contains the password. You must submit the screenshot of that FTP message. Your first name (which is the password) should be clearly visible in the screenshot.End of Lab