Pooldemon² HTTP packet sniffer - coded in C++

[c0ldshadow]

i decided to code up this HTTP packet sniffer in C++

you can download it here:

DeepTide Security - Software



goals i was trying to accomplish:
1) make it easy to know when HTTP traffic is occurring (the systray icon blinks red to alert you when it detects HTTP POST/GET requests). its cool being able to catch stuff in the background, especially when u know u aren't browsing
2) malware analysis (sometimes malware disables or interferes popular packet capture tools, so this is an alternative for situations like that).


if u find any bugs / etc please report them to me

peace
-c0ld

 

[bofhemeritus]

Is this tool still available? I've checked both sites' download areas, to no avail.

I'd like to try to see how this works as an alternative to WireShark/ngrep for capturing SOAP calls (done over HTTP put/get/delete/post requests with a slightly special header).

Basically, I'm using a tool called ngrep to capture the packets currently with a BASH shell script that wrangles the output into the bits relevant to me. All I'm doing is basically debugging a piece of code that sends SOAP calls back and forth.

Anyway, sorry to highjack your thread! If you still have it available, I'd love to play with it - particularly if it's as lightweight as I think it might be. Wireshark is a hog!

 

[ped]

Send a PM to c0ldsha0w . He may not be subscribed to this thread and thus unaware of your post.

 

[Zom-B]

There's a Firefox addon called Live HTTP Headers, that even lets you create and modify data you send.

 

[c0ldshadow]

hey, i discontinued that tool

u might want to check out Fiddler if looking for something similar

peace
-ave

 

[bofhemeritus]

Thanks for the replies - I didn't realize that it was discontinued. Sorry for necroing!

 

[c0ldshadow]

it's ok LOL no worries

i don't code as much as i used too (just Perl stuff and occassionally some C++ still)

mainly write Botnet C&C / exploit kit IDS rules now

my w0rk is at :

Security Engineer - IDS / IPS Custom Rules

happy coding
peace
-ave