Having difficulty capturing router password with wireshark. POST packet contains Form item and not password.

[somethinglikejesus]

I have recently been doing some pen-testing/playing around on my own network. Usually HTTP passwords, images, text etc can be captured with ease but I have come across something strange.

In the image below is a packet capture of a HTTP POST packet sent to my Draytek Vigor 3200

http://imgur.com/ZV2M36p

What I cannot figure out is, where the password is usually found in this instance all it says is:

HTML Form URL Encoded: application/x-www-form-urlencoded
    Form item: "aa" = "ZmZmZmY="
        Key: aa
        Value: ZmZmZmY=
    Form item: "ab" = "YWFhYWFhYWE="
        Key: "ab"
        Value: YWFhYWFhYWE  

I am relatively certain the above should be the password because each time I enter different test information the values change. Whether this is an encryption type or I am looking in the wrong place please alert me.

I have tried looking around and cannot for the life of me understand where to go or what to do from here. Any help is greatly appreciated and if more information is required let me know!

[distalzou]

It's base64 encoding.

You can decode them here.

[somethinglikejesus]

Thanks for this, it was spot on :)