wiki:KrakenHttpSniffer
Last modified 14 months ago

Kraken HTTP Sniffer

Author

Requirement

You should install winpcap or libpcap first.

Download

Usage

If you run jar without any arguments, http sniffer will print installed network interfaces like this: 

[*] Device name is required
{BCEFC3FC-73EC-41C5-9EBC-25A4F645D748} MS Tunnel Interface Driver
{AFF4C6CC-2C74-485A-8A7F-807712D18A24} TAP-Win32 Adapter V8
{5E955A8C-E8A8-4A02-8EDB-161136A6886A} Microsoft
{FE8D1EF3-3E0B-46ED-B776-217C4F180D15} Marvell Yukon Ethernet Controller.
{A569FFF6-617E-4B48-92D3-D086C63857AD} Microsoft

You should specify network interface using -i option: 

java -jar kraken-http-sniffer-0.5.0-package.jar -i {A569FFF6-617E-4B48-92D3-D086C63857AD}

Running Example

[*] Start sniffing...
2010-10-10 03:44:13 /192.168.0.5:48998 -> /211.234.242.176:80, 304, GET http://pds18.egloos.com/pds/201006/01/33/Untitled-1_07.png
2010-10-10 03:44:13 /192.168.0.5:48996 -> /211.234.242.176:80, 200, GET http://pds18.egloos.com/pds/201006/01/33/Untitled-1_02.png

To Do

  • Selective file dumping option (.exe, .jar, etc)
  • Regex pattern matching option
  • Message formatting option (header, content body)
  • Save to log file option
  • Any idea? send feedback