You have been given access to a packet capture tool on a compromised network segment. Another user on the network has recently authenticated to an internal web portal over unencrypted HTTP.

Because HTTP transmits data in plaintext, their credentials were sent across the network without any protection — and your sniffer was listening. Your task is to extract those credentials and use them to perform an account takeover.

HTTP sends all data — including passwords — as readable text over the network. Any device on the same network segment can intercept and read it. This is why HTTPS exists.