A sniffer is a program that monitors and analyzes network traffic, detecting bottlenecks and problems.

learn more… | top users | synonyms

-1
votes
3answers
43 views

How can I extract the certificate from this pcap file?

I have a pcap file of 14 sniffed SSL packets. I uploaded it here: ssl.pcap I opened it with wireshark. I see the 14 packets. The largest of seems to contain a self signed certificate (as it is made ...
0
votes
1answer
36 views

Unsecure FTP with Encrypted file and Wireshark leakage

Hi i was wandering if it is possible to have a password leaked to an encrypted file on an anon ftp server with r-x-w permissions. So for example i have a file encrypted using gpg and when opened on ...
1
vote
2answers
98 views

How to protect against request intercepting and parameter-tampering? [duplicate]

My problem is that I made an app and I am making PHP Requests. I just realized that you can sniff everything on Android with "Packet Capture". How can I make my app more secure? I thought about ...
0
votes
0answers
39 views

Can't see WEP networks with airodump-ng

I use airodump-ng on my RPi3 (armhf version). I've been able to properly set up the interface and turn it into monitor mode. Now, I can sniff the air traffic using airodump-ng, but I can't see my ...
0
votes
1answer
37 views

Encrypted traffic analysis

If i tunnel any tcp traffic true ssh or any ssl encrypted protocol will some one capturing the traffic capable of do some kind of offline decrypting using the capture file ?? What technic they use to ...
24
votes
3answers
5k views

How to deal with WPE users

I own a chat room and some users use a program Winsock Packet Editor, "WPE PRO". With it they manage to bypass chat rules, like they can't be muted or kicked, and they can send messages fast ...
1
vote
0answers
11 views

snort spp_sfPortscan Preprocessor Customization [closed]

I am working in snort 2.9.8.0. I want to modify the snort code for Portscanning Detection,i.e spp_sfPortscan.c and its related code to build a customized portScan detector. Ex:suppose A is scanning ...
3
votes
2answers
57 views

Traffic capture on a public server

I have a VPS where I'm hosting a web app built by PHP. Yesterday I Looked to the apache log and I found that someone running a scanner to guess some urls like: /wp-admin /joomla /mysql and so on ...
5
votes
2answers
73 views

Malicious packet that attacks packet sniffers?

Is it possible to crash a packet sniffer through a specially-formed packet to stop website administrators from tracking down the source? If it is possible, has it been done before? Or is it just not ...
1
vote
2answers
118 views

Sniff network packets that don't talk to my computer?

How would one sniff wireless network packets that do not pass directly through my computer- without access the the AP or router? I want to be able to sniff for network traffic (even while ...
3
votes
1answer
60 views

OS fingerprinting [closed]

I have been asked to write a small tool that detects the running OS on a victim device. The tool should be able to fingerprint Linux versus Android versus iOS. Extra credit for version info. It needs ...
0
votes
0answers
46 views

Log to file my own SSL traffic coming from websocket

I have to decode and capture my own traffic that come from a websocket WSS listening on port 7072, when I use browser to connect to my data provider. My idea is: to redirect traffic to ...
2
votes
1answer
125 views

Capturing text messages on the fly

Suppose your phone is not connected to any network. You are sitting in a cafeteria with 50 other people, everyone is communicating to each other via text messages. Is it possible through any device or ...
0
votes
1answer
61 views

Can we track sniffers in a network?

It is very simple to launch Wireshark in monitor mode and listen to connections in the host network. I have come across a program called SniffDet. Is it an all round solution for finding sniffers on ...
2
votes
2answers
718 views

How to capture WhatsApp API requests using Fiddler?

I am trying to capture WhatsApp network requests and not able to do it using Fiddler. This is what I did: Installed Fiddler. Exported Root certificate and installed on my Android device. I modified ...
0
votes
2answers
155 views

Is hack.chat safe from packet sniffing?

So I recently found this tool called hack.chat. It's a disposable, browser-based IM system. If I were to use this at a friends house, public network, or at work, it is possible for someone on the ...
1
vote
2answers
616 views

How can I see the websites visited by clients of my WLAN?

How can I view the websites that are visited by the user of my wifi? What tools are required to do this? And one more question: can I see the WhatsApp communications?
3
votes
1answer
212 views

Log all crypto keys used for outgoing SSL / TLS connections on Linux server

Is there some environment variable that works how SSLKEYLOGFILE works for NSS-reliant programs but which would apply to all outgoing TLS / SSL connections on a Linux server and not just ones that use ...
-2
votes
1answer
73 views

How can I know if any cell phones other than a given set are turned on in the nearby area?

I am searching for a solution to identify phones simply by the signals it emits. Imagine a signal receiver in a room, then I want to know which people are using phones nearby. I don't care what they ...
2
votes
1answer
135 views

Can cascaded routers protect inner network's machine from attacker from outer network?

Given: Outer Network router A wan ip 209.123.12.11 address 10.10.0.1 machine A address 10.10.0.10 gateway 10.10.0.1 Inner Network router B wan ip 10.10.0.100 address 192.168.10.1 ...
1
vote
3answers
221 views

Unencrypted FTP to transfer encrypted data - okay if IP-restricted?

If unencrypted FTP over the public internet is the only file transfer option for a particular situation, what security concerns are applicable assuming: The data being transferred is strongly ...
1
vote
3answers
204 views

Sniffing traffic on a secured wifi connection

Open wifi is a security risk since all the data can potentially be sniffed by anyone. What I want to ask is even on a secured wifi (which requires some kind of password for authentication), the data ...
2
votes
2answers
94 views

How can the connection of a rogue VPN router be countermeasured with a sniffer?

As an IT admin, what can I do to countermeasure an attack performed like this page explains? http://www.pivpn.net/2015/08/hide-your-ass-hide-by-mac-address-and.html What they do is to put a raspberry ...
2
votes
1answer
196 views

Sniff LAN SSL requests

When I log in into Facebook, using Wireshark in the same machine, I can read the request data in plain-text. That doesn't happen when I'm sniffing my LAN: I can read the SSL packets but they are ...
1
vote
1answer
87 views

Padding of 802.11 packet with 0's in libpcap [closed]

I am trying to send probe request to Access Points.But whenever I send a probe request packet it is padded with 0's i.e I see two packets on wireshark for every packet I send : a non-padded packet and ...
2
votes
0answers
172 views

How do I sniff Z-Wave packets with a Zulu Transceiver [closed]

I'm trying to sniff the communication between Z-Wave devices. I have set up a "smart home" consisting of a few devices using Z-Wave technology, which use the frequency 868 MHz. I have been told that ...
4
votes
1answer
396 views

Decrypting TOR traffic?

Is there any way to decrypt tor traffic from an exit node or relay? I know it's possible to analyze the traffic using something like tcpflow or tcpdump, but it comes back as encrypted giberish. Is ...
4
votes
1answer
394 views

Man in the Middle Attack against NTP

So, lately I've been really into penetration testing and learning the nitty-gritty of tech. I'm dong courses on computer architecture, cryptography, surveillance law, and computer networks. I never ...
2
votes
2answers
282 views

Defence against promiscuous detection techniques

As an attacker,how do I prevent people from finding out that my NIC is in promiscuous mode? For test like ARP and DNS how do I defeat the users detection mechanism?
2
votes
2answers
293 views

Promiscuous mode and packet sniffing

Is it must for a packet sniffer to enable promiscuous mode?Can packets be sniffed without the NIC being in promiscuous mode? Also when in promiscuous mode the NIC accepts all packets which are not ...
3
votes
4answers
411 views

In a monitored network, can the admins tell if Tor is being used?

I'm not asking if Tor is secure, I'm asking if an observer can know you are using Tor? For example if a persons ISP or company network monitors traffic would they be able to determine with certainty ...
2
votes
1answer
193 views

How can someone sniff dial-up connection using phone line?

Let's assume we have a computer that sends packets to the internet using dial-up connection, and we have access to the analog data on the phone line(we have access to the phone line), how can we make ...
1
vote
3answers
103 views

Is my company VPN the same as third-party VPN providers?

I'm just a bit confused with VPN. My company has VPN when I work remotely. So, I can access internal websites. However, does it mean if I browse my Internet over my company VPN, it will be as secured ...
5
votes
3answers
1k views

Is it possible to sniff traffic of a remote network? (With admin access to router)

Me and a friend of mine are simulating a widespread scenario where router configurations are untouched (default passwords) and are visible from the internet. Him, acting as the victim, will constantly ...
-1
votes
1answer
950 views

Sniffing my networks traffic illegal? [closed]

So this is a pretty straight forward question. If I setup a free and open wifi access point called "Free&Tots-Secure" then sniff all the traffic of people that connect to it, does that violate ...
3
votes
3answers
402 views

Is it possible to obtain the login credentials submitted by users?

It's a question at computer security textbook Assume that user A is about to use some website that requires login credentials. User A starts his web browser, types the website’s URL, and submits the ...
5
votes
2answers
4k views

Facebook POST request capture

I have been trying to test a sniff on facebook POST request forms using wireshark (filtered HTTP). At login form, I would try login, and then check wireshark and see that no packet was captured. ...
1
vote
3answers
401 views

Sniffer attack on mobile [closed]

I have Nokia lumia 625. And a guy hacked it using sniffer. That's how much I know about it. He has access to all my online texts(eg. Whatsapp, messenger etc) . and also to offline carrier text ...
2
votes
4answers
391 views

Risks of using HTTP

What are the risks of using HTTP instead of HTTPS assuming that there isn't any rogue hacker sitting on my personal WIFI network waiting to sniff my traffic? Can a hacker sit in his boat in the ...
0
votes
1answer
55 views

Browser Unable to Fully Authenticate HTTPS

I'm attempting to fully verify the HTTPS encryption using Chrome & Firefox but both browsers currently display the connection as 'including resources which are not secure'. I have tried using ...
0
votes
1answer
95 views

DNS resolution attacks by flooding spoofed replies

Each DNS request has an ID of 16bits. In the event that an adversary is unable to sniff the query, a way to spoof the DNS reply is to flood the resolver with many replies. Request from victim Query ...
0
votes
1answer
187 views

localhost to localhost ICMP traffic that is suspicious.. any idea of what is creating this?

I keep seen this on my tcpdump output.. is prob something very simple and logical but I can't see to see any process with lsof or netstat doing a ICMP request to it's own 127.0.0.1 every 2-3 secs... ...
2
votes
4answers
172 views

Suspicious SMS getting received on selected browsing

I am receiving several suspicious SMS messages with links telling me that I have requested subscription to their services (which I have not) asking me to confirm subscription. These SMS appear only ...
0
votes
1answer
123 views

Is it possible to bypass sniffing when using port mirroring?

INTERNET <-A-> ROUTER <-B-> PC Let's theoretically think we mirror the port on a ROUTER to a file. So the full network traffic on it. Question: is it possible to still have ...
22
votes
6answers
7k views

Possibility to sniff HTTPS traffic on devices without installing a certificate

My goal is to sniff the HTTPS traffic of some digital devices (AppleTV, game consoles, etc.), and decrypt the HTTPS packets in my local network. I cannot figure out a way by using some HTTPS ...
0
votes
1answer
416 views

Sniffing external networks from a public network (place)

There is something that I can not understand. If you are preparing, building up an attack from a public place (coffee shop, restaurant ect.). How can you be tracked by law enforcement? I'm asking ...
1
vote
1answer
398 views

Spying on insulated cables (electromagnetic/induction field)

I hope this is the right forum to ask this question. If not, please tell me where to go. From my understanding most cables have an electromagnetic field around them when data passes through them and ...
3
votes
2answers
395 views

How to secure a network (FTP connections) from sniffers

I'm actually working in a medium sized company with security concerns. Let me explain you my problem : The context: My office has one single internet line. This line is accessed by anyone in the ...
2
votes
3answers
2k views

promiscuous vs monitor mode in 802.11

I've been reading up on promiscuous mode and monitor mode as they relate to 802.11 networks. I understand the difference, which is explained here: What is the difference between Promiscuous and ...
0
votes
1answer
217 views

sniff mobile application to find whether packages sent to the third person [closed]

I suspect that my messages via Viber are being sent to another person - because to my mobile have access a lot of people and it could be possible that somebody installed there some software or ...