URL and POST capture

[flamer]

Hi, is there an application in BT3 that is designed to sniff and capture HTTP based data? for example my target will know if I use an invalid certificate in an MITM attack, so instead when they login to a webmail over SSL I dont try and intercept the username and password, but I do capture the contents of an email sent/received since that traffic is non-ssl once they are logged in. Also I would like to see the urls visited. It must be pretty simple, however I prefer not to go down the wireshark track...

[spycooder]

Also I would like to see the urls visited. It must be pretty simple, however I prefer not to go down the wireshark track...

just type urlsnarf

[flamer]

thanks for the reply, URLSNARF is good, but it only shows the urls, I would like something that gives a bit more details like pages visited, and HTTP post/get data.. is there any other app for that?

[imported_Deathray]

Why not just use the convenient filter ability in Wireshark?

[cgkades]

webspy is pretty good, but probably not exactly what you're looking for

[williamc]

Use Burp Suite.
http://portswigger.net/suite/

[coolabhijits]

just try the remote_browser plugin in ettercap.....sure u will get it