Results 1 to 5 of 5

Thread: Grab images off wireshark

  1. #1
    Just burned his ISO
    Join Date
    May 2008
    Posts
    15

    Default Grab images off wireshark

    If you capture packets using wireshark that contain image files, how do you go about exporting the binary to reassemble into an image?

  2. #2
    Senior Member
    Join Date
    Jan 2006
    Posts
    1,334

    Default

    Have you tried chaosreader?

  3. #3
    Just burned his ISO
    Join Date
    May 2008
    Posts
    15

    Default

    That is the program I am looking for, but I am trying to grab images off a WPA network. Therefore I can decrypt the packets, but then when i feed it into chaos reader, it outputs nothing... im thinking this is cause chaosreader only sees the encrypted packets. Any way to isolate the decrypted packets and feed it in a readable format?

  4. #4
    Just burned his ISO
    Join Date
    May 2008
    Posts
    15

    Default

    Got it,
    you cant use airdecap-ng 1.01, have to use older version. you can make changes to the files but that was too much work, so i just downloaded 0.9.1 or 0.9.3 and they both work. once you have the decrypted cap file you can use chaosreader on it and it works flawlessly.

  5. #5
    Just burned his ISO
    Join Date
    Feb 2006
    Posts
    11

    Default Grab images

    I hadn't tried with any other versions but wireshark has that ability already for http.

    I just verified it on 0.99.6a (I forgot I had it on this machine) but it works with the latest versions.

    File -> export -> object -> http

    If you follow the prompts you can dump any of the http images from a capture file. If you just need something quick for http that is the way to go.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •