Web Application Penetration Testing for PCI

When was the last time you faced a packet trace file, and hoped to remember all the different filters used to detect anomalous network activities? Were you typing in the filters as you progress, and hoping for an alternate solution? This paper discusses some basic features in Wireshark, and the advanced techniques for creating simple to complex Display filters for Coloring rules, using it to identify network reconnaissance, attacks and recovering evidence from within the packet trace files.