1
Start Wireshark
Open Wireshark → Select "Loopback" adapter → Start capture
Apply filter: http || tls
2
Capture HTTP (Insecure)
Click "Test HTTP Login" above → Login → In Wireshark: Find POST /login packet
Right-click → Follow → HTTP Stream
🚨 PASSWORD VISIBLE IN PLAINTEXT!
3
Capture HTTPS (Secure)
Click "Test HTTPS Login" above → Login → In Wireshark: Find TLS packets
Right-click → Follow → TLS Stream
✅ ENCRYPTED GIBBERISH ONLY!
4
Compare Results
HTTP Stream shows: username=md5_user&password=Pass123
HTTPS Stream shows: �R��J�u��q��S�... (encrypted binary data)
