So now let's talk about this white shark to a white shark is a packet capture and you can see every
packet going and coming through your computer, right?
If you visit a website and you can contains a lot of packets, it can actually be Penitentes.
You can see those in the shirt.
And this virtual tour is very important.
If any malware is trying to come to any server, you can watch even that also.
So a potential this open your browser and type the word shark.
So that is why your daughter can't download.
So you can see the Windows installer and portable apps I'm going to do this for.
So let me down to this download folder so you can easily install shakin Linux operating systems are
have two types pseudo app and start.
And it was in Florida and Texas.
So one thing you need to notice is in Linux systems, if you run as a normal user, then your adapters
are not that phone with the opposition.
What you want to do is you need to run the circus atmosphere, so you need to type pseudo.
So that's very important to know.
So that's good next and I agree, I know you if you want to teach our kids a command line version of
the workshop and you can take these instructions and click next.
And yes, I want the desktop icon and click on next.
OK, I'm going I'm going to read this default definition for.
And I want to introduce and go and pick up.
So I don't want to introduce you, speak up and install.
So it has asked me to start and speak up.
Yes.
This model captures the are the package and I agree.
And if you aren't going to try and pick up also, then you need to take this option.
So for now, let's just enjoy this one.
And this white shark software is Diffa, clean start in the Caribbean.
If you have colonics in your do in order to do, but we need to introduce Warshak.
So my installation has been completed next, and we can finish three and pick ups installation has been
completed and are still installing.
So my wife, Shaquan Sarrazin, also completely gone next, and we can't finish, OK, now I'm going
to run to this very sharp.
So it's lowering some interfaces and Raptor's mean minimal máxima, this one, so you can see there
are there are plus computer, there is Bluetooth and Landline and it you can see here, there is some
that are going on.
I can see the expression yes.
And some that are going on because it's my life and my wife has been working now.
And even though when you're not browsing the some of the background applications, my use, my Internet,
that's what this Internet data is being used in.
My Net1 has also some spikier and you can see are afraid.
I mean, these on these adapters, there is no Internet.
Of course, young rapper comes into play and I cannot imagine a machine and has this.
We are connected.
So these are somewhat inscrutable.
You know, what I want to do is I want to click on this way and click on this.
So when I double click on this very point, it will start sniffing out, capturing all the packets to
and from a Raptor and this one is the color button, which is in a rectangle and this is stock.
But we can stop capturing the packets using this button.
So if I do this one now, there are no packets being added.
Now I want to start again.
I want to call this bluebottle.
We can start and it will ask what you want to do with these already packets you want to save or continue.
So let me continue without saving.
So now to start from starting.
As you can see, there are so many messages going on, so many packets, and you can restart this and
you can also set the capture options.
You can only set capture options before the capture has been shot.
And there are some fight options you can open in any store to pick a fight.
So the extension should be the pick up.
If you want to sell, though, all this information so you can just navigate through these packets,
find packet, find next, previous and the view you can see you can click on this full screen to get
into the full screen and time display format.
So these are effects, this display.
And you can see here the same options, the same the same old options are there here.
And these are some of the basic settings.
And first, I I'll explain this part.
So let me stop this capture.
So first one is the packet number.
The first packet is captured has given number one and the time from the respect to the letter I'm sorry,
to to time from the first capture and the source IP address and definition I get.
So I'm sending this packet from my computer.
This is my computer's IP address to the nation.
This IP address and the protocol I am using is E.S.P and the length of these packets of terabytes and
information.
As you can see, there are some flags that aren't finished yet.
So finish in the sense I'm going to write that in the reply from the destination.
Write this user for connection termination.
As you can see, if you click on this packet to click on this package, you can see here that the CPPIB
model of this packet, you can see the frame frame options and which type of frame you are using it
Ethernet to an IP version for information and the DCPI information, because we are using that discipled
protocol.
And you can see here support this nation.
So this is the best spot on this nation and this is the PXP and this is a transport security.
So here you can see the respect to hex dump of this packet information, the data, which is I'm going
to send to the nation.
I can see that got spoke to her.
Tromso here, excellent piece of nothing but just not getting the character representation of each character.
Siefert it's not ah, it's just like a ASCII representation of the hex.
So these are the three windows mainly being focused on.
Now let me start a new chapter.
Let's see.
OK, before that, I want to show you how to know on Google plugin and click on this page.
You want to have one dot com.
So that's right.
Now you can enter here the password segment and admin.
So admin, admin password.
So I'm going to enter the admin and the posterous.
So let me start this capture.
I want to continue see.
So want to refresh this page and we want to enter the credentials, Edwin Edwards so quickly, so nothing
happened, not at see an auto shop.
So as you can see, this package is a step backward and it is requesting that BHP deduct that request
and you need to perform the request to get any.
OK.
We will see that in our fundamentals.
This is that BHP is this one.
This is the BHP.
All right.
Now, if you go to decide what extent or whatever, and you can see here that BHP GDP one, not one.
And I'm using this GDP on that one version and this is the playing field calculator.
And here I am telling the host now that is BHP, not one of a dot com.
So this is the hostname.
And I'm asking this.
So that's not BHP webpage and the connection capital.
So after this, getting the webpage, keep the connection alive and every other request parameters and
data see user names.
Mozilla, Firefox.
OK, I'm using the Chrome.
An excerpt I want to accept, the former textile extended, since the brothers accept only like pages,
I'm telling the server to send me the response in the format of.
You can see the excerpt and quoting here, except languages are English.
So I want the English copy of the login page.
This is the Dataquest.
We are requesting the Web server to get me the login page.
So where it is on this one and as you can see here, so we copy this IP address so you can also apply
that is preferred.
So what I did this performance here, there are a lot of traffic going on apart from this, my machine
and my Web server.
There are a lot of traffic going if you want to filter that, that you can set IP that you really are.
So I want to show I want to review all the packets with this IP address.
And there's also this initial, let's say, 176 dot.
Twenty eight dot fifty got one six four if I enter no, only the packets with the other source IP,
the IP as this IP matches, then only that packet will be displayed.
Now the question is going to be the question.
And it has sent me some data and after this acknowledgements, let's see the response, the response
rate is one point one two zero zero two zero zero.
Is that a it means access and it's is OK.
Now, the response I have got is this one.
I got this so all this data is in here and this is my data received from that Web server.
So one more thing.
One more thing I want to show you is here there is a push to push the push to use it, to push some
data.
And other observers wrote, we are OK with that and the that we are.
So if you could get the the these duties are sent to us now, if you scroll down, you can see the post
request here.
So there is a push to go straight.
So here, the post user info that BHP and then
you can see the you can see the admin and the password, your username and password form and got the
data and from, you know, music was to admit.
So this value, this parameter value is uniform and the password is pass.
And these details are sent in a plain text format because the GDP itself is a print protocol that when
it sends the data protection, that's what we have.
So we are clearly seeing this and we know that when we take our paper in the login box, clearly in
the plain text format.
So that is one very big disadvantage of this huge GDP.
That's why I have to this want to show you this that GDP protocol since the data in apprentice format.
So as you can see, my brother, it's harder to articulate.
So why it is not a shot and transitions around this site because it is doing better, because it means
that any attacker can manage them all in my network or any are in the path between me and Sara.
And they can see the data using this version and the attacker can see clearly the username and password.
Right.
So that's why you need to focus on this normal spertus rate.
Not.
And one more thing I want to show you is, uh, if you click on this and click on right.
Click on this.
Follow this.
You know what this is?
It will collect are the packets information with participation and it will arrange a neat format for
us so that we could discuss it with you.
So this is my request.
I'm requesting for that BHP file.
And the response I got is, OK, take this.
OK, next time the questions started out serious, serious foes and logos.
OK, now what we want to do is I want to write and follow a..
You know, as you can see here, we have got the same result as before.
But, you know, in this we have got the response to I mean, in the history of our format to scroll
down.
You can see that requests.
And the software should be the post sequestrate.
Verismo posted.
So I think.
So let me click on this history TV show.
So I think the OK, this is the police request.
As you can see here, it's been used in Mexico and buses and you can also search in this feels for your
enter password, which I find next, and you can see the next segment.
So in this way, you can just use the voucher to sniff the packets.
So this is all about the basics of white shark.
And I want to show you the white shark filters.
Jegede White Shark.
So let me go to this Web site and you cannot remember or the whale shark patrols.
That's what you need to maintain a tee shirt.
So like this one.
So here you see the display filters, and after capturing every package, you can update this display
for us to get to our desired package so you can see the Ethernet filter, abortion filter.
You can also separate IP, the IP, I mean, the IP address.
I just want to set this IP address then the packets with only these destination IP with this IP will
only be viewed.
So we are narrowing down the those with these filters.
As you can see, there are so many filters out here and you can also perform the operations between
these filters.
So if the IP law definition port is equal to this one, our IP sore spot is called that one and you
can apply the filter.
So always keep these cheat sheets in a separate folder.
So whenever you go out and you don't, you can just refer to them.
So that's of what that's all you need to know about this virtual goods.