Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Sniff HTTP packets for GET and POST requests from an application

Tags:

http

wireshark

I am coding an SEO tool in C# for doing keyword research. I need to make calls to Google Adword keyword tool. Now I know some tools which are doing the same already.

I just need to decipher what they are doing. I tried using Wireshark but it's very complex to get the actual POST data using Wireshark.

I tried using fiddler on IE but seems like too many Javascript requests are made which confuses fiddler a lot.

If I can just find out the exact requests the other tool is making I think my job is done. How can I do this?

like image 331
Sumit Ghosh Avatar asked Aug 04 '10 22:08

Sumit Ghosh


People also ask

How do I see HTTP requests in Wireshark?

Observe the traffic captured in the top Wireshark packet list pane. To view only HTTP traffic, type http (lower case) in the Filter box and press Enter. Select the first HTTP packet labeled GET /. Observe the destination IP address.

Can Wireshark capture https traffic?

Wireshark captures all traffic on a network interface. The thing with HTTPS is that it is application layer encryption. Wireshark is not able to decrypt the content of HTTPS. This is because HTTPS encrypts point to point between applications.


Video Answer


1 Answers

Put http.request.method == "POST" in the display filter of wireshark to only show POST requests. Click on the packet, then expand the Hypertext Transfer Protocol field. The POST data will be right there on top.

like image 171
Karl Bielefeldt Avatar answered Sep 24 '22 09:09

Karl Bielefeldt