How to capture data and passwords of unsecured wireless networks with SniffPass and SmartSniff

A few months ago, I released a new version of both SmartSniff and SniffPass with support for using them with Microsoft Network Monitor 3.x

In the release details, I also specified that 'Wifi Monitor Mode' button was added for using 'Monitor Mode' under Windows Vista/7/2008, but without giving extensive explanation about how to use this feature. So in this blog post, I'll add more details about this 'Wifi Monitor Mode' and how to use it on SmartSniff and SniffPass.

When a wireless network card enters into a 'Monitor Mode', it listens to specific channel that you choose and captures all the packets that are sent by wireless networks on your area in the specific channel that you selected.  If the wireless network that sent the packet is unsecured,   SmartSniff and SniffPass will be able to show you the packets data.

Before I start to explain you how to use this mode, here's the system requirements for using  'Monitor Mode':

  1. Unfortunately, this mode is only supported on Windows Vista, Windows 7, and Windows Server 2008. Windows XP is not supported.
  2. Both the network card and the device driver must support this mode. I currently don't have a list network cards that support this mode under Windows. However, if you manage to get your card into monitor mode, it'll be nice if you post your card model as comment to this Blog post.
    Also, be aware that according to Microsoft, some Wifi drivers may cause a system crash when entering into monitor mode.

Finally, here's the instructions for using 'Wifi Monitor Mode' with SmartSniff and SniffPass:

  1. First, download and install the latest version of Microsoft Network Monitor 3.x if it's not already installed on your system.
  2. Run SmartSniff if you want to capture general TCP data or SniffPass if  you only want to capture passwords. Be aware that SniffPass can only capture passwords that are not encrypted. Most Web sites and services of large companies use SSL to encrypt the passwords, and thus SniffPass cannot capture them.
  3. Go to the 'Capture Options' window (F9), choose  'Network Monitor Driver 3.x' as a capture method, and then click the 'Wifi Monitor Mode' button.
  4. In the opened 'Wifi Scanning Options' window, choose the right wireless card (in most cases you should have only one) and then check the 'Switch to Monitor Mode' option.
  5. You can now select to scan a single channel or to switch between multiple channels every x milliseconds.  After you selected the desired channels, click the Apply button.

    Wifi Scanning Options

    Wifi Scanning Options

  6. The most important thing: Leave this window opened !
    When you close this window, the network card will exit from monitor mode and it'll return back to its normal state.
  7. In 'Capture Options' window of SmartSniff/SniffPass - select the right wireless card and then press the 'Ok' .
  8. Finally, press F5 to start the capture. If you have any active unsecured networks in your area, you'll be able to see the captured data.
  9. After you finish, close the 'Wifi Scanning Options' window, so your wireless card will return back to normal.

The information in this article is provided for educational purposes only and for making people aware of the risks of using unsecured wireless networks.  it's not intended to be used for any illegal activity.

This entry was posted on Monday, November 8th, 2010 at 3:55 am and is filed under NirSoft Tips. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

15 Responses to “How to capture data and passwords of unsecured wireless networks with SniffPass and SmartSniff”

  1. StyrianOak Says:
    November 9th, 2010 at 6:25 am

    Hi,
    works with an Intel Wireless WiFi Link 4965AGN!
    Would be nice if the channel of the captured conversations could be shown ?

    Thank you for all these GREAT tools, kind regards - StyrianOak

  2. suppertoolz Says:
    January 25th, 2011 at 7:12 am

    thanks for your all software Nirsoft.

  3. khan Says:
    March 9th, 2011 at 11:12 pm

    Dell Wireless 1395 WLAN Mini-Card does NOT work.

  4. Forge Says:
    March 11th, 2011 at 9:06 pm

    I have a TP-Link TL-WN951N which I believe has a Atheros chip(not sure) I followed the instructions and meet the system requirements but when I go to capture options and try to select Network Monitor Driver 3.x the option is grayed out does this mean no support?

  5. theITGuy Says:
    March 22nd, 2011 at 11:47 pm

    A Dell Wireless 1505 Draft 802.11n WLAN Mini-Card Works

  6. razz05 Says:
    March 24th, 2011 at 3:16 pm

    Forge, I'm having the same problem. That option is grayed out... Can anyone help us?

  7. Dynam0 Says:
    April 5th, 2011 at 6:22 am

    Works great with a TP-Link TL-WN651G PCI Card and Windows 7

    Your utilities are the best! Thanks

  8. Mike Says:
    April 18th, 2011 at 10:59 pm

    Im using an Atheros AR9285 built in to my asus laptop and it doesnt seem to capture anything, however im low on unsecure networks nearby so going to test elsewhere and check for sure

    I get the occasional UDP protocol from some local address which is clearly not within my own network so could be getting something from an outside network source, will investigate more

    I heard a certain type of netgear usb wireless g devices work, looking for something that works good and is usb with wireless n, g and b myself anyone got any solid suggestions for a cheap usb wireless device that does b, g and n and can work with this stuff

    Seen the software work flawlessly with local device my own computer activity it monitors and gets passwords and other stuff really good

    Thanks

  9. David Says:
    May 14th, 2011 at 6:25 pm

    I'm very glad to use this feature!

    Now I'm trying to do some projects with the api. However, I cannot find out how to switch to monitor mode with codes. Would you please help me?

    Thanks~

  10. kulminator2 Says:
    June 2nd, 2011 at 3:41 pm

    Realtek RTL8187W with Windows 7 ultimate 32 bits O.K. Thanks

  11. TK Says:
    July 15th, 2011 at 4:31 pm

    works fine with Broadcom 4321AG 802.11a/b/g/draft-n Wi-Fi Adapter on Vista 32bit SP2

    802.11a band does not expose all available channels but 802.11n mode does reveal more "a" band channels but still not all of the band 5GHz band allocation unlike 802.11g which exposes from 1 to 14.

    Keep up the great work (the entire fleet of tools not just smartsniff)

  12. tral Says:
    August 18th, 2011 at 6:39 pm

    It's greyed out here too. what does it mean, and can I fix it? please respond....

  13. Anonymous Says:
    November 10th, 2011 at 5:39 am

    Dell Wireless 1397 WLAN Mini-Card-- not the 1395 that other guy had-- works.

  14. Blu Says:
    December 16th, 2011 at 12:40 am

    Folks if the Network Monitor Driver 3.x the option is grayed out you need these two files. The files are Microsoft Network Monitor Driver 3.x and WinPCap. After installing them you will have the Network Monitor Driver 3.x the option. I had the same problem as you guys, option grayed out. These fixed it and it works great now.
    http://www.microsoft.com/download/en/details.aspx?id=4865

    http://www.winpcap.org/

  15. JE L Says:
    February 18th, 2012 at 7:32 pm

    does not work on a realtek 8187 usb or engenious 802.11n usb through win 7 ultimate 64

Leave a Reply