A kind of attack in which one system, program, or user successfully masquerades as another.

learn more… | top users | synonyms

10
votes
3answers
177 views

How does SMS spoofing work practically?

I have been researching the web for information on how I can spoof an SMS myself, but I seem to find more on how to detect it, or how to use tools to do it rather on how to do it myself. I have tried ...
3
votes
1answer
52 views

How to protect from WPAD attacks?

If you are in a Windows network, and you basically connect to a website ; And there is an attacker on Linux who changes the hostname to WPAD and configures WPAD.dat in his system, all your PC's ...
0
votes
0answers
13 views

Passing Original ANI (Automatic number identification) [closed]

If Bob calls an 800 number, can Bob's call be forwarded to another 800 number, and on the CDR of the party that received the call, show Bob's ANI with the DNIS that it was forwarded to?
1
vote
1answer
351 views

How can spoofing a certain MAC address enable sending probe requests that I was never connected to?

I was wondering how could my computer that uses a spoofed MAC address be sending probe requests for APs that I was never connected to? Note: The other computer with the original MAC address I was ...
1
vote
1answer
1k views

What is a AUTH-KEY in the security of the computers?

I'm studying security in computers and in particular the URL Spoofing. I understand that a form of URL spoofing is phishing. Then I read that a countermeasure against phishing is the authentication ...
2
votes
1answer
67 views

Securely sending packets without them being spoofed

I'm working on a simple multiplayer game to break the ice with network programming. I have a system where if the player moves, the server receives a move packet that contains some stuff like the ...
5
votes
3answers
112 views

How will popular WiFi clients react to an evil twin

If I create an evil twin hotspot next to a legitimate AP and simply clone the SSID, I know that my WiFi client will see these as 2 different APs and both will show up in a list of available networks ...
2
votes
3answers
296 views

Security concerns with TCP holding onto out-of-order packets?

Consider the following... Alice and Bob are communicating over TCP. Currently, the next expected TCP sequence number is 1000. Charlie, pretending to be Alice, sends a spoofed TCP packet to Bob with ...
4
votes
1answer
88 views

How can I prove calls or messages from a spoofed number are fake? [closed]

Situation There are 3 people. Person A, B and the victim, C. Person A asks person B to spoof their phone number to look like the phone number of person C. Person A wants to report person C for ...
2
votes
1answer
459 views

What is setuid based script root spoofing?

I'm reading this and I'm little confused. What exactly is this setuid based script root spoofing?
1
vote
4answers
99 views

What is the security of one time login with SMS code?

I am writing a web application and I want to let my users to login by sending one time code to a given number. The code will be received by a GSM module within certain time after it's generation and ...
1
vote
3answers
83 views

Can a telephone caller be authenticated?

If we assume that the human element is unable or not skilled enough to discover a phishing attempt (or some other malicious endeavor that can be perpetrated verbally), what forms of defense can be ...
-1
votes
2answers
142 views

How can someone spoof texts with my phone number?

A dear friend of mine in the U.S. recently told me that she had been quite hurt by the unkind texts I had sent her after the Holidays. I do not have a texting mobile phone, nor do I do texting from ...
1
vote
1answer
56 views

How does my unused e-mail address get spoofed? [closed]

I have 2 e-mail accounts - one on GMail and other one on a popular mail provider in my country (O2). GMail has a secondary e-mail set for security - that is the O2. I started getting e-mails from ...
0
votes
1answer
60 views

Spoofing domains in Facebook

Over this past week my Facebook's timeline have been flooded by people posting "teenagers sex videos" and tagging a lot of people. It's common in Facebook to see this kind of malware spreading to ...
2
votes
0answers
95 views

How could someone trick Norton Safe Web into thinking my website has PHP files that don't exist?

I'm in a bit of a quandary over Norton Safe Web's rating of my company's website. My question is: is it possible for someone to fool Norton Safe Web into thinking that our website has PHP files which ...
3
votes
2answers
84 views

Why do email that didn't pass SPF checks go to my mailbox?

I tried a website that supposedly sends spoofed email. I sent myself an email impersonating another email address and the message showed up in my yahoo mailbox even though according to the headers it ...
13
votes
2answers
887 views

Are SSL browser sessions kept alive across requests?

When a client requests an SSL web resource via a browser (ie: a login request) and then follows up with additional requests are all the requests executed in the same SSL session? Or does the browser ...
15
votes
3answers
2k views

Somebody is spoofing my email to send spam messages, and I have no idea how to block

Someone is using my Google Apps Email ID to send spam messages and I've received 2000+ undelivered and autorespond emails. I have no idea how to block this because the spammer is also using my email ...
0
votes
2answers
206 views

Can someone send a text to a phone and make it appear on another person's phone text message?

A friend said her husband was sleeping on the couch, and she got a text that appeared to come from his phone, but he didn't send the text. Is this possible to do, and, how can she trace the origin? ...
5
votes
2answers
729 views

Phone call to try and gain access

About a hour ago I received a call from a suspicious phone number. They explained that they had received an alert from my PC and needed to gain access to correct the problem before my PC was ...
3
votes
3answers
758 views

I'm getting spam e-mail…from myself?

I noticed yesterday that I had received spam e-mail, but my own e-mail address was listed as the sender. Naturally, I changed my password. This is probably a spoof, but I don't know enough about ...
0
votes
2answers
153 views

Can someone use IP spoofing to access your facebook profile as an administrator?

Do any IP addresses have security so they cannot be used by a hacker to access secure pages? For example, could a hacker spoof a Facebook IP address to enter someones profile page and make changes as ...
1
vote
1answer
86 views

What is the role of IP spoofing in DDoS attacks?

I've read that IP spoofing is often used in denial of service attacks, and I've also just recently read about ingress filtering, which attempts to use blacklisting to filter out spoofed IP addresses ...
1
vote
1answer
13k views

Can I determine actual orgin of spoofed text message?

Can I determine the actual sender of a spoofed text message? I received a text message yesterday that appeared to come from one of my contacts, but he did not send it. I contacted my carrier (Verizon) ...
2
votes
2answers
3k views

Is this a valid Windows update page

In my chrome browser if I google for Windows Update the first hit is windowsupdate.microsoft.com/‎ When I click on it I am redirected to ...
4
votes
1answer
86 views

Are there any statistics about packet filtering to prevent IP spoofing on the internet?

DDoS attacks via spoofed DNS(sec) are daily news for the last few years, but packet filtering should prevent IP spoofing on the internet. I tried (as an exercise) to spoof a packet on my VPS and on ...
5
votes
1answer
203 views

IP address spoofing on internet

On a local network, an attacker can craft a custom IP packet with a fake source IP address and send it to a host. I know that the attacker will not receive a response, but there are still attacks for ...
7
votes
1answer
108 views

How does Google Analytics prevent fake data attacks against an entity's traffic?

In order to register a "hit" on Google Analytics, the list of things required are: Unique API key(s) for Google AnalyticsPublic: can be gotten from the embedded JavaScript files on the pages for ...
-3
votes
1answer
100 views

spoofing with harassing messages [duplicate]

How can you locate the source of spoof calls and texts. I'm having threatening messages and deliveries made from my phone number, but not from my phone to my home and other peoples phones and they're ...
1
vote
1answer
51 views

Can you force your PC or device to use only DNSSec-verified lookup results?

Okay, I'll admit something first-off: I don't really understand some of the practical aspects of how DNSSec protections work very well.(Even after reading resources like this.) Well, I certainly ...
-1
votes
1answer
70 views

“FROM” mail spoofing [duplicate]

I just received a mail from my boss saying someone with my mail has send some request for money. I is kinda serious and I know it is easy to spoof a mail, but the mail is myname@mycompany.com. So my ...
1
vote
2answers
220 views

Is this some sort of scam or do I have stalker?

Sender: msmith11@mail.com Emails are from IP address:74.208.4.200 Emails are weekly. all text, no links, no images. Some Depict sexual fantasies in high detail directed to a female - which I am. ...
3
votes
1answer
13k views

Is there any way to detect caller ID spoofing?

To be specific the main problem is that I want to detect if the caller ID of the incoming cal I get is real or spoofed? Most VoIP servers now allow their clients to use any caller ID they want. Also, ...
0
votes
1answer
115 views

What attacks or exploits are possible when MAC address, IP, and Port of a WiFi access point are known? [closed]

I just accepted a position at a small firm and was testing the previous WiFi setup for flaws and exploits that were possible. We have two AP's for business and guest connections, everything checks out ...
1
vote
2answers
20k views

How easy is it really to do IP spoofing? [closed]

I read a lot about IP spoofing but I am not sure how easy it is really to do. Let's say I am in Spain, can I somehow connect to a server in the US with an IP address that is allocated to Mexico? Won't ...
1
vote
0answers
81 views

How can one tell is a message is spoofed from one phone to another but “about” a third party? [closed]

This question is about whether the source phone number of an SMS message can be spoofed and, if so, what forensic measures might be taken to determine and prove that that has occurred. Assume that a ...
3
votes
2answers
149 views

Does Visa Checkout have preventive measures against spoofing?

A few online merchants are offering special deals for using Visa Checkout, a payment service similar to PayPal, so I've been trying to learn something about it before signing up. When you are on a ...
0
votes
2answers
47 views

Emailing spoofing

I've got 2 macs on a home network, as well as an iphone. I've got my own domain on Godaddy set up with an SPF record. I've changed the password on my account. But emails are being sent using my ...
0
votes
1answer
78 views

Does IP Spoofing mean using a proxy?

As said in question, does ip spoofing mean that someone uses a proxy, thereby he/she appears as different ip in the internet world?
16
votes
3answers
65k views

Is it possible to make a phone call appear to come from another phone, even to the network provider?

Quick Question Is it possible that I could call a mobile number, but have the call forwarded through another number active on a different phone that someone else has? I have had unlimited access to ...
1
vote
1answer
241 views

How to bypass DNS spoofing protection

I know that SSL certificates prevent DNS spoofing, but I was wondering why it is not possible after ARP cache poisoning to set up iptables rules and redirect the origin destination to fake page?
6
votes
1answer
1k views

How to reject e-mails spoofing your own domain targeting your employees at Office365?

One problem Office365 users deal with is that an external SMTP server can spoof the domain of an organization and send e-mails to the domain users; where the e-mails appear to be from employees of the ...
7
votes
2answers
1k views

Spoof IP adress after a TCP handshake

I know it is not possible to perform a successful TCP Handshake with a spoofed IP-Address. However I wonder: Is it possible to spoof the IP once a TCP handshake was performed successfully? For ...
1
vote
0answers
158 views

How to know our mobile number or phone has been hacked?

We have a Xiaomi Redmi 2 phone and a sim card in it. Yesterday we started receiving angry and swearing text messages. we called the numbers back and apparently a mass angry text messages have been ...
1
vote
1answer
1k views

802.11w protected management frames - Wi-Fi

I've been reading about protected management frames, introduced in 802.11w, and had a few questions. Apparently, a message integrity check is provided with de-authentication frames, allowing either ...
3
votes
1answer
523 views

Rogue WPAD server attack

Today I encountered something I have certainly not seen before first hand. Our IDS blocked some outbound traffic attempts from 5 servers with no WAN access. This traffic was leading to an inactive ...
2
votes
1answer
2k views

What is TCP spoofing?

I know about IP spoofing is it the same thing? The question originated from the question Is TCP more secure than UDP?
4
votes
1answer
6k views

SMS Spoofing not available in kali

Has the SMS Spoofing option been removed from the Social Engineering Toolkit ? I run 3.14-kali1-amd64. I get only the options shown below. Tried updating both kali and SET but i still dont get the ...
3
votes
3answers
7k views

No SMS Spoofing attack vector in Kali Linux! [closed]

I just realized that there is no SMS spoofing attack vector included in the latest version of Kali Linux. Is there a work around?