Capture unencrypted credentials (HTTP Basic Auth, FTP, Telnet, SMTP) - Read unencrypted email content - Capture file transfers - Monitor browsing activity - Harvest session cookies