I know of the two programs, one is Wireshark (a packet sniffing program) and the other is Ettercap (a man in the middle attack program). I tried doing a MITM attack before, legally on my own home network, with both the programs Wireshark and Ettercap and the result was same: I got the same username and passwords with both programs. If I have Wireshark, do I still need Ettercap to do a MITM attack, or since the result is the same can I do it with just Wireshark?


Wireshark is a passive packet analyzer which allows you to look at network traffic and search it.

Ettercap can do that too, but it is also able to actively change any network traffic routed through it. You can set it up to drop, modify or insert certain network packets.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.