what are the means that bob can use to get passwords ceh

What are the means that Bob can use to get password from his client hosts and servers?