Wireshark’s offensive uses can include reconnaissance, protocol analysis, and credential discovery when protocols are insecure.

### Why this is right The lesson identifies reconnaissance, protocol analysis, credential discovery on insecure protocols, and understanding application behavior as offensive uses. These activities show why packet analysis tools should be used only with authorization. ### The concept A packet analyzer reveals details about network communications. Defenders use that visibility to investigate and verify protections, while an attacker could use it to learn about systems or discover exposed information. The same technical capability can therefore support different goals. ### Terms - **Reconnaissance**: gathering information about systems or networks before further activity. - **Protocol analysis**: examining the structure and behavior of network communications. ### Remember A tool’s security value depends on who uses it, why, and with what authorization.