Cybersecurity for Beginners: How to use Wireshark

  Рет қаралды 140,841

The PC Security Channel

The PC Security Channel

Ай бұрын

Wireshark Tutorial: Learn how to use Wireshark in minutes as a beginner, check DNS requests, see if you are hacked, or applications are spying on you, and what ad trackers a site might have. Try the new Malwarebytes for free: mwb.link/4ay7nag (sponsor)
Buy the best antivirus: thepcsecuritychannel.com/best...
Join the discussion on Discord: discord.tpsc.tech/
Get your business endpoints tested by us: tpsc.tech/
Contact us for business: thepcsecuritychannel.com/contact

Пікірлер: 175
@steventelfer8186
@steventelfer8186 Ай бұрын
Wireshark is one of the most important tool in IT. Mastering this tool is such a great advantage. Thank you!
@Adam-ey2jc
@Adam-ey2jc Ай бұрын
I have always wanted to learn more about Wireshark but felt imitimidated by it but this video does a good job of breaking down some of the confusion around it. Modern computers are so complicated! I would love to see more videos about Wireshark or of this nature.
@buraduri
@buraduri Ай бұрын
This video seems like it's missing an important part of the usefulness of wireshark. How do I identify what I don't know what I'm looking for? No shit if I connect to youtube I'll see youtube but what about unrecognized connections from potentially malicious software on my PC
@joepjoep9531
@joepjoep9531 Ай бұрын
You have to look at this differently it’s made for people who never used it before you can’t start somewhere in the middle or very complicated if you are learning something new
@ayush0477
@ayush0477 Ай бұрын
You are right it is for network analysis, but he is only showing a small use case of wireshark
@pcsecuritychannel
@pcsecuritychannel Ай бұрын
Wireshark is an investigative tool, not anti-malware. If you want a quick and easy way to detect malware, this isn't it.
@seansingh4421
@seansingh4421 Ай бұрын
In that scenario you would wanna look for network connections involving unusual ports, so lets say you have a typical Windows home edition PC, but you spot a some random executables (Apps and .exe) successfully connecting via Port 22, Port 3389 BUT you don’t even have Remote Desktop feature because that’s unavailable in Home editions. This is just one example and trust me this can be a rabbit hole of being over suspicions but this is one example of an outbound C&C connection
@johnsmith1953x
@johnsmith1953x Ай бұрын
@@pcsecuritychannel Sounds like an opportuniy for something AI to "sit" on top of wireshark and do this.
@KyanoAng3l0
@KyanoAng3l0 Ай бұрын
Been using this alongside Portmaster. Makes me giddy to know that my tweaks and mods to minimize telemetry on Windows 10/11 work! :D I'd only see Windows telemetry being blocked by Portmaster when Windows tries to check for updates in the BG.
@cryptoafc7655
@cryptoafc7655 Ай бұрын
Portmaster made my windows go in blue screen mode
@KyanoAng3l0
@KyanoAng3l0 Ай бұрын
@@cryptoafc7655 Better bring it up to the Portmaster devs or in their community (can't mention the name here cos YT auto-deletes comments that mention other socials, lol). I haven't encountered that yet, but Portmaster does use a kernel driver so BSODs are possible.
@ttrqs
@ttrqs Ай бұрын
@@KyanoAng3l0 havent encountered bsod aswell, using portmaster for 1 week now
@rrakesh6434
@rrakesh6434 Ай бұрын
May i know what kind of tweaks mods you do to reduce telemetry. I am interested to know
@Holycurative9610
@Holycurative9610 Ай бұрын
@@rrakesh6434 winaero tweaker is pretty good for W10/11.
@christophermcbrian4462
@christophermcbrian4462 Ай бұрын
Yes, great video. I'm in cybersecurity program in college and so far I'm doing the general studies but I can't wait to get into the cybersecurity stuff like this.
@_Garm_
@_Garm_ Ай бұрын
really intersting tutorial, would love to see more wireshak tutorials! :D
@shackcf
@shackcf Ай бұрын
Been using Wireshark on personal PC for years. While working it was Network Instruments that was pre-2009. Thanks for the videos.
@Plazmal
@Plazmal Ай бұрын
I've always liked using Wireshark to monitor connections from other devices a like IoT devices etc. It's super useful for that. Good video as always.
@regisegek4675
@regisegek4675 Ай бұрын
Indeed
@DudeWhoSaysDeez
@DudeWhoSaysDeez 22 күн бұрын
Can you monitor all traffic on your network from just one computer?
@hoovysimulator2518
@hoovysimulator2518 Ай бұрын
Very nice to see my machine isn't sending any DNS requests on the background. (excluding of course, whatever other protocols there are. And the software updates from time to time!) I'm on Linux Mint of course. And I would love a tutorial for other Linux users as I had some trouble with getting it to work (also the starting screen where you select what to capture has many other options, at least fore me. Though thanks to the filters I see there is only 1 wireless connection point!). And of course would be nice to know what those other protocols are! (even if they can just be ignored)
@davidbell7094
@davidbell7094 Ай бұрын
Excellent info picked up,through this video. Yea I'd love too see some more videos like this,is good too understand more of what it all means,cheers buddy!
@firstandlastname2090
@firstandlastname2090 Ай бұрын
Thanks for breaking down Wireshark. Its still intimidating, but Im getting better at it. Glad I found your channel!
@SyberPrepper
@SyberPrepper Ай бұрын
Thanks for the video. Would love to see more Wireshark instructional videos. You do a great job of simplifying complexity.
@Randtiktok
@Randtiktok Ай бұрын
Ok so: 1 - How do I know if a DNS is malicious or unwanted 2 - How do I prevent useless or dangerous DNS manually 3 - Am I going to have to do that to each DNS
@KeshavKumar-gc9pu
@KeshavKumar-gc9pu Ай бұрын
Use a trusted DNS
@ttrqs
@ttrqs Ай бұрын
u can look at a program called "portmaster", it blocks unsafe dns/ads/telemetry etc system-wide
@pcsecuritychannel
@pcsecuritychannel Ай бұрын
1. Ask yourself, is it unexpected? Can you think of a reason for it? If not, investigate further and try to locate the source of the traffic by eliminating other noise. 2 and 3. If there is a cryptominer on your system connecting to mining sites, the solution would be to remove the miner, not prevent the "dangerous" DNS. The DNS isn't what is dangerous, no such thing.
@hiru92
@hiru92 Ай бұрын
use dns over https or tls, like rethink dns, nextdns etc
@CoderSal-XIII
@CoderSal-XIII 28 күн бұрын
Wireshark is such an important tool. I use it all of the time both at work and at home. Such a great tool. Good video for beginners.
@ttrqs
@ttrqs Ай бұрын
been waiting for a vid like this, ty
@damianpodgorski6977
@damianpodgorski6977 Ай бұрын
Loved the video, simple and powerful! Hope more to come on wireshark
@joepjoep9531
@joepjoep9531 Ай бұрын
Good video for absolute beginners
@codydietrich4246
@codydietrich4246 Ай бұрын
Well done. Super easy to understand!
@FakeJeep
@FakeJeep Ай бұрын
Very simple and straight forward tutorial.
@priyojitdeb1891
@priyojitdeb1891 Ай бұрын
Thanks, this was really informative!
@wissy0062
@wissy0062 Ай бұрын
I liked the video, it was very interesting thanks Leo😄❣️
@GustavoMsTrashCan
@GustavoMsTrashCan Ай бұрын
Thank you for this wonderful tutorial!
@peterwassmuth4014
@peterwassmuth4014 Ай бұрын
Totally awesome! Thank you for Sharing! 💯✴
@HazexDimond
@HazexDimond Ай бұрын
great stuff 👍 many useful cases for this tool last time i used it was to check my dns traffic to make sure it was all configured/encrypted correctly for a deeper dive, chris greer has some good wireshark content on youtube, explains filters well
@Kristol-Ice
@Kristol-Ice Ай бұрын
Good tutorial but I think you miss a important point for some people who can not see any readable DNS query. If DNS query is encrypted(maybe by HTTPS), WireShark can not capture those DNS query in readable string.
@ao4514
@ao4514 Ай бұрын
Hello Leo, many thanks for a great content as always. Would you ever consider doing a content on how to use Wireshark for hunting malware?!
@Alchemetica
@Alchemetica Ай бұрын
Yes please, Leo, more videos like this one. Thanks as always.
@user-bl2gj1dk4s
@user-bl2gj1dk4s Ай бұрын
Yes, please do more videos to add on this one (advance). Is there anything further to see if the connections are not easily identifiable? Is there a way to pinpoint a remote connection quickly?
@wannabedal-adx458
@wannabedal-adx458 Ай бұрын
1) More content on Wireshark would be great (aka Tutorials). 2) How much does Wireshark cost?
@Taffy84
@Taffy84 Ай бұрын
It's free
@squirlmy
@squirlmy Ай бұрын
Open Source and free forever, unlike for example Metasploit, which is partly open and partly with proprietary upgrades.
@xbeast7585
@xbeast7585 Ай бұрын
Thank You So Much For The Video Sir Please Make More Videos On How To Use Wireshark 💓✨
@jaycolife2314
@jaycolife2314 Ай бұрын
I’m interested in computer science and how they connect with the world. It’s fascinating but intimidating and overwhelming.. I subscribed hoping you’ll put up more content like this. Break it down for us..
@MrBeeytube
@MrBeeytube Ай бұрын
Great video!
@TheRealWillM
@TheRealWillM Ай бұрын
I don't know if you do this already but maybe create a 'related series' as an aside to the main thrust of the channel. Anyway those are my thoughts and content like this is very useful for 'dipping' the toe in, which may be useful down the track.
@urik7793
@urik7793 Ай бұрын
Just a note at the beginning you can select multiple network adapters by holding CTRL as well.
@sbzr5323
@sbzr5323 Ай бұрын
Hi Leo, thank you as always informative. One more thing what does it mean - red SSDP, notify
@UserforPhone
@UserforPhone Ай бұрын
I am very curious about why there is no option to have a professional packet capturing software like Wireshark for mobile/Android?
@HabeebSule
@HabeebSule Ай бұрын
This is an awesome video thanks.
@rdsii64
@rdsii64 Ай бұрын
An interesting video subject would be on what to do when you find your computer connecting to places you don't want it to.
@bernieoldham7580
@bernieoldham7580 Ай бұрын
enjoyable video ,thank you . one question how do we stop the spyware. a video on how to turn it off, individually would be most welcome . 🙂
@bretjohnd.morales9310
@bretjohnd.morales9310 Ай бұрын
Now I know you have a website. =) Glad to know.
@muhammadsalmanafzal9396
@muhammadsalmanafzal9396 Ай бұрын
would love a more deep dive to understand what other kinds of network requests are being made if a malicious software is installed.
@GYTCommnts
@GYTCommnts Ай бұрын
My old Outpost Firewall used to show me similar information, separated by the apps (or component of the O.S.) which was generating the connection... Is there a tool for this or is there an option available on Wireshark for monitoring this? Or is only doable on firewalls?
@Ulfeneimer
@Ulfeneimer Ай бұрын
That Wallpaper look sick! Where did you get it? @The Pc Security Channel
@timchalmers1700
@timchalmers1700 27 күн бұрын
Cool. Thanks!
@stephie3206
@stephie3206 Ай бұрын
Merci 😊😊😊
@gerry2345
@gerry2345 25 күн бұрын
Very good vid.
@tuttoaposto4011
@tuttoaposto4011 23 күн бұрын
Does Wireshark show only the activity on the computer it’s downloaded to, or the LAN the computer is part of?
Ай бұрын
Please create a video on accessing malicious and phishing domains while using NextDNS. A general review of NextDNS would also be be nice!
@kaeez
@kaeez Ай бұрын
What browser are you using?
@AcvaristulLenes
@AcvaristulLenes Ай бұрын
What to do to get rid of the 12 or so UAC notification whenever we start Wireshark?
@vaclovas-art
@vaclovas-art Ай бұрын
DNS can be also encrypted using DNS over TLS or DNS over HTTPS. So than you cannot see any DNS requests which was made. ISP also cannot see it 😊
@miltonthecat2240
@miltonthecat2240 Ай бұрын
I would like to snoop on WiFi traffic to the various WiFi-enabled devices that are proliferating in my house. This is mostly a curiosity, but I expect there will also be surprises, some perhaps concerning. I've been told that I can use Wireshark to do this, but I need to add a separate dedicated WiFi interface on my PC that supports "promiscuous mode". I found some trailing edge WiFi dongles that are supposed to support promiscuous mode, but I also need a compatible driver. This is where I have hit a dead-end, as I have been warned that the drivers for these trailing edge WiFi interfaces often have embedded malware, and I don't have a sacrificial PC available to dedicate to this effort. Any light you can shed on this in a future video would be of interest to me.
@pipjersey8303
@pipjersey8303 Ай бұрын
i dont see that much DNS listings on mine, just a couple from kaspersky, maybe it didn't install right?
@ImSimpIicity
@ImSimpIicity Ай бұрын
Thanks !!!!!!
@markhutchinson8760
@markhutchinson8760 Ай бұрын
Yes, more vids like this!
@Jerry-vt4zf
@Jerry-vt4zf Ай бұрын
You need to do a video, kaspersky vs malwarebytes premium
@TheTitaniumSkull
@TheTitaniumSkull Ай бұрын
This reminds me of back in late 90s early2000s there was a free app (can’t remember name) that backtracked incoming pings.
@ethimself5064
@ethimself5064 Ай бұрын
Is Malewarebytes still poot for on the fly? I trust it is still great at scans
@SKULLETON_Clips
@SKULLETON_Clips 21 күн бұрын
Good video
@johnduty4505
@johnduty4505 23 күн бұрын
What about reading the cap file...how can that be done?
@coisasnatv
@coisasnatv Ай бұрын
My Gigabyte GA-990FXA-UD5 R5 motherboard connects to the internet in the middle of the night after I turn it off.
@zapa1pnt
@zapa1pnt Ай бұрын
If Windows, go into settings and turn off "wake on LAN".
@coisasnatv
@coisasnatv Ай бұрын
​@@zapa1pnt Is disabled. By the way, the motherboard does this without a hard drive attached. It turns itself on in a kind of low-power mode and connects to the Internet.
@zapa1pnt
@zapa1pnt Ай бұрын
@@coisasnatv: Well, if you can't find it in the BIOS, you will need to unplug it, after shutdown. 😁✌🖖
@coisasnatv
@coisasnatv Ай бұрын
@@zapa1pnt I already do. But how many people don't know? How many people are affected by this? Gigabyte is famous for doing this, google the topic and you will see that Gigabyte has been caught with his pants down more than once doing exactly the same thing.
@KGBSpyGeorgeCostanza
@KGBSpyGeorgeCostanza Ай бұрын
this is a tool that is great for checking if your computer has been RATTED right?
@blueyhis.zarsoff1147
@blueyhis.zarsoff1147 Ай бұрын
How about an app for a phone and firewall to block outgoing requests?
@Lossh2004
@Lossh2004 Ай бұрын
is it normal to have remote desktop to be running in the background?
@fiefieviolet
@fiefieviolet 17 күн бұрын
This is so complex, its like a programming language. I initially thought it was just gonna be a program that detects and blocks everything
@bruceparker3139
@bruceparker3139 Ай бұрын
hey , I wonder how MacOS handle this? can you do these on MacOS also?
@alleeadl289
@alleeadl289 Ай бұрын
can you do us a favor and review costume os like tiny11, Ghost Spectre, windows x lite, from a security prespective many people want to use them. just give us a genral security test of them please. :(
@ToecutterPA
@ToecutterPA Ай бұрын
How did you get it in Dark Look/Mode?
@user-wf6bi5oj5k
@user-wf6bi5oj5k Ай бұрын
how would one check a hacked PC on this environment?
@shinigamirenegade
@shinigamirenegade Ай бұрын
Not going to lie if you start using Wireshark and if you have familiarity with osi model like layer with layer 3 routers packets and layer 2 switches frames then it's not bad at all. To read the traffic and knowing udp tcp protocols you're golden. I think I need help with adjusting ethernet adapter into promiscuous mode and the other mode. And what's the functionality.
@Holycurative9610
@Holycurative9610 Ай бұрын
Portmaster and winaero tweaker are my ho to programs for shutting down telemetry.
@KirenKK-te7pb
@KirenKK-te7pb 20 күн бұрын
Wireshark has to be a " backdoor" to catch " backdoor entries " too. The ethics of the admin of any empowerment matters as much as the expected service😅!
@DrMatey215
@DrMatey215 Ай бұрын
Cool!
@buzzbang9164
@buzzbang9164 Ай бұрын
how to restart everything it does something watching my pc
@ZephniStrife
@ZephniStrife 8 күн бұрын
I don't know why but my instant reaction to something like this is: How can I trust it? As it could quite easily see current webpages you are on or applications you're typing passwords into, and then hide its ip: protocol transaction with a server... but it's probably fine 👀
@girl4632
@girl4632 Ай бұрын
How to know about suspicious connection
@denizorsel1029
@denizorsel1029 18 күн бұрын
Skoda octavia is not that bad if you are still looking into it =)
@kimsena268
@kimsena268 Ай бұрын
Waiting for eset smart security 17.
@WilsonPendarvis-tn3wm
@WilsonPendarvis-tn3wm Ай бұрын
I have little snitch. Not as deep as this, but it is powerful
@CSGhostAnimation
@CSGhostAnimation Ай бұрын
Now if we could just firewall all traffic until I actually open google, or open my video game, then I would be happy
@guilherme5094
@guilherme5094 Ай бұрын
👍
@granturismo5917
@granturismo5917 Ай бұрын
always there is a "tool" to...
@renkeyvd3924
@renkeyvd3924 Ай бұрын
thanks
@PaddyPatPatrick
@PaddyPatPatrick Ай бұрын
Hello Everyone, From The UK👋
@jkbobful
@jkbobful Ай бұрын
Shout out to Safing Portmaster it blocks a lot of this spying
@jonmike9339
@jonmike9339 Ай бұрын
This is why you need to be careful if you work from home.Only connect your work laptop to guest wifi
@uzijoe
@uzijoe Ай бұрын
Better use Portmaster
@samiam4026
@samiam4026 Ай бұрын
the biggest question is are wireshark is safe to used it since all virus check website say have something on it?
@Holycurative9610
@Holycurative9610 Ай бұрын
If you try to download a cracked version of any program it will come up as having a virus because of the software used to crack the program This is piracy and if you want the full version of a paid program then go pay them for it and you don't have false positives for virus alerts. Wireshark is free and used by a lot of people so it is very unlikely to come preloaded with a virus. I've just installed Wireshark and there are NO viruses at all...
@vulcan4d
@vulcan4d Ай бұрын
Boot up Win7 with wireshark. Boot up Win11 with wireshark. Now throw away that Win11 installer.
@user-ec6cm5tt4z
@user-ec6cm5tt4z Ай бұрын
I'm sure my FBI agent has this task well in hand. For my safety, of course.
@Nunzio_77
@Nunzio_77 Ай бұрын
Can you test Firewall of Avast Free? Thanks
@luisquintana2793
@luisquintana2793 Ай бұрын
just use peerblock
@Ichi.Capeta
@Ichi.Capeta Ай бұрын
when ever I see them ads server or address, it will be paste into my "hosts" file
@ProGamerTRHD
@ProGamerTRHD Ай бұрын
is epic games spyware because when i launch my laptop fans starting turning
@Graham6410
@Graham6410 Ай бұрын
It helped me discover a virus on my mums phone once as the virus attempted to scan the WiFi network my computer and mum's phone were connected to.
@jessthnthree
@jessthnthree Ай бұрын
nice
@farhamandkhan
@farhamandkhan Ай бұрын
So you live in Canary Wharf?
@dyonramselaar
@dyonramselaar Ай бұрын
"What applications are reaching out and what data is being sent?" -> You only show how to look at DNS requests, this show nothing about what data applications are sending. You only show which DNS queries your PC as a whole is making. "Maybe you are even hacked and your computer is connecting to attackers" -> By just looking at DNS that shows nothing, maybe they are using IPs instead of domain names. Maybe they use some Amazon or Google endpoint which doesn't make it clear either. Maybe they embedded a Tor tunnel. Once a domain has been resolved, it wouldn't re-resolve unless you've flushed your DNS cache or forcefully look up the domain again (using nslookup for example). I would've preferred to see how to isolate traffic from a specific application to see exactly what it does and exactly what data is being sent.
@kleeenco
@kleeenco Ай бұрын
I appreciate this video, but this tutorial is a little too basic. would love to see something more in depth in the future.
@Gunz1234
@Gunz1234 Ай бұрын
pretty simple idk why people are crying in the comments 😂
Linux: podman & distrobox install and intro
33:38
pypypylinuxdotcom
Рет қаралды 12
Learn Wireshark in 10 minutes - Wireshark Tutorial for Beginners
10:38
Vinsloev Academy
Рет қаралды 1,2 МЛН
ДЕНЬ РОЖДЕНИЯ БАБУШКИ #shorts
00:19
Паша Осадчий
Рет қаралды 7 МЛН
PINK STEERING STEERING CAR
00:31
Levsob
Рет қаралды 17 МЛН
How to not get hacked: real example
13:55
The PC Security Channel
Рет қаралды 381 М.
Wireshark Tutorial for Beginners | Network Scanning Made Easy
20:12
Anson Alexander
Рет қаралды 196 М.
Mastering Wireshark: The Complete Tutorial!
54:30
Hacker Joe
Рет қаралды 140 М.
Malwarebytes vs 2000 Malware
11:12
The PC Security Channel
Рет қаралды 157 М.
Find Anyone With Tookie-OSINT | Social Media OSINT |
9:44
Alfredredbird
Рет қаралды 2,8 М.
How to Check if Someone is Remotely Accessing Your Computer
16:58
Detect Hackers & Malware on your Computer (literally for free)
16:38
Malware beats Windows Defender: How you get hacked
7:26
The PC Security Channel
Рет қаралды 177 М.
How to never accidentally run Malware: Must Have Windows Tweaks
7:21
The PC Security Channel
Рет қаралды 311 М.
How to Listen to Phone Calls in Wireshark
7:30
Plaintext Packets
Рет қаралды 130 М.
Интереснее чем Apple Store - шоурум BigGeek
0:42
КОПИМ НА АЙФОН В ТГК АРСЕНИЙ СЭДГАПП🛒
0:59
keren sih #iphone #apple
0:16
Muhammad Arsyad
Рет қаралды 1,2 МЛН
МОЩНЕЕ ТВОЕГО ПК - iPad Pro M4 (feat. Brickspacer)
28:01
ЗЕ МАККЕРС
Рет қаралды 38 М.