HI everyone, and sorry for not being so much present those last days ! Even if I didn't respond too much, I read it all.

So, you guys saying there is no password : if the log is not empty, my script did everything right. Then the problem can come from the client (victim) which can be protected, or using https, or anything else that would jeopardize the operation. The only thing you have to do to make sure it works is do that on your own connection, targeting another computer you have access to. Then go to private browsing (so that there is no cookie for sure) and enter some creds. If there is none displayed, something is wrong; send me the logs and as much info as you can about what and how you did it. Then I'll try to diagnose the problem. If it worked, but the parser fcuked something up, your pass might be in the file. Don't worry, I don't give a sh|t about it, I'll just tell you what I found, etc. then delete it all.

#####
You - of course - must enter 192.168.1.1 192.168.1.2 192.168.1.3, etc.

#####
Yep, read about ARP cache poisonning. Basically, you force the client to reconnect through you, so downloads will stop (and be freaking slow) and the rest will stop and reconnect. If it doesn't reconnect, something's wrong, probably ip forwarding that messed... That shouldn't happen though.

#####

Ps : even though the icon has been chosen, if someone comes up with something that Saturn, Unhuman and myself find to be better than the actual one (that rocks btw), we'll use it So send it to me !

Ps2 : If the script generally works for you (shows pass and all) but for a precise website didn't, send me the logs (or only needed part if you can do that) and I'll try to understand why it didn't. That might mean that the parser needs updating, so it's important that you do that. With that said, I never encountered a website that couldn't be parsed =D
Only maemo.org is tricky : it is sniffed, and pass shows, but it is sent md5-encrypted ! Nothing you can do about that !