I have a small network infrastructure in my home on which I'm hosting some services such as a website, file server and such.
Many of those services have an administration web interface which isn't using HTTPS or doesn't support it.
I'm currently using a laptop in my home network using Wi-Fi to login into those internal HTTP administration pages.
So, user and password are probably sent in cleartext inside my home network. Since this is a WPA2 protected wireless connection between my laptop and my home router, credentials should pass in the air encrypted as I know. Other servers are connected using wired.
I know there are a set of public tools, such as airmon-ng, to capture packets which are sent over the air. Is it possible for someone who is using such passive capture tools to get my credentials?
I mean, the attacker captures the WPA2 traffic from the air (without being connected on the network) while I'm logging to HTTP-only internal web pages. So, I'm pretty sure the credentials are present (encrypted) in the capture. Could the attacker use brute-forcing to get some key and decrypt the WPA2 traffic, so get the credentials from such capture?