wireshark_extract_credentials
Extract plaintext credentials from network traffic captures by scanning for HTTP Basic Auth, FTP passwords, and Telnet login attempts in PCAP files.
Instructions
[Security] Scan for plaintext credentials in traffic. Detects: HTTP Basic Auth, FTP passwords, Telnet login attempts.
Returns: Credential findings summary or JSON error
Errors: FileNotFound: pcap_file does not exist DependencyError: Field extraction failed
Example: wireshark_extract_credentials("insecure.pcap")
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| pcap_file | Yes |