Tcpdump

• https://neverendingsecurity.wordpress.com/2015/03/14/tcpdump-tutorial-sniffing-and-analysing-packets-from-the-commandline/

• tcpdump -i eth0 port http or port ftp or port smtp or port imap or port pop3 -l -A | egrep –i 'pass=|pwd=|log=|login=|user=|username=|pw=|passw=|passwd=|password=||name=|name:|pass:|user:|username:|password:|login:|pass |user ' --color=auto --line-

Ngrep

• ngrep -q -W byline "GET|POST HTTP"

Dsniff - https://github.com/tecknicaltom/dsniff

Network Authentication Cracking Tool - https://nmap.org/ncrack/