Questions tagged [spoofing]
A kind of attack in which one system, program, or user successfully masquerades as another.
47
questions
17
votes
1
answer
3k
views
How to protect from caller-id spoofing?
Yesterday, I listened about caller-id spoofing and was left astonished as its misuse can result in severe consequences for victim.
Please tell me how to protect myself from this prank and is there ...
- 305
59
votes
7
answers
12k
views
How can caller ID be faked?
My late brother was contacted by someone on landline number operated by a carrier in Australia and which displayed on caller ID. I traced the number to a company and though they did call him on a ...
- 559
8
votes
2
answers
2k
views
Phone call to try and gain access
About a hour ago I received a call from a suspicious phone number. They explained that they had received an alert from my PC and needed to gain access to correct the problem before my PC was "...
- 1,039
24
votes
1
answer
18k
views
How can I spoof a phone call and make it appear to come from another phone?
I'm performing a penetration test against a company. Part of my social engineering procedure is to contact the IT department and try to convince them to that I'm an employee in the company and get ...
- 44.1k
13
votes
2
answers
107k
views
Can I determine actual origin of spoofed text message?
Can I determine the actual sender of a spoofed text message? I received a text message yesterday that appeared to come from one of my contacts, but he did not send it. I contacted my carrier (Verizon) ...
- 131
9
votes
2
answers
4k
views
Can an SSH server fingerprint be spoofed?
If I simply connect to an SSH server, get its key fingerprint, and immediately disconnect, does the SSH protocol ensure that the server also had the private key in order to get that far into the ...
- 93
3
votes
2
answers
4k
views
WiFi Hotspot's Evil Twin
So an Evil Twin Wifi hotspot is a hotspot with the same SSID and/or same MAC that when the victim auto-connect to this hotspot, all traffic go through this evil twin and thus the information ...
- 133
42
votes
2
answers
154k
views
How easy is it really to do IP spoofing? [closed]
I read a lot about IP spoofing but I am not sure how easy it is really to do. Let's say I am in Spain, can I somehow connect to a server in the US with an IP address that is allocated to Mexico? Won't ...
- 597
11
votes
4
answers
4k
views
Spam email "via" my domain, but SPF record exists
I just got an email from some random person's name "via" [email protected], although [email protected] is just a distribution group within G Suite.
We have an up-to-date SPF record added from Google, ...
- 223
10
votes
1
answer
13k
views
802.11w protected management frames - Wi-Fi
I've been reading about protected management frames, introduced in 802.11w, and had a few questions.
Apparently, a message integrity check is provided with de-authentication frames, allowing either ...
- 507
2
votes
1
answer
19k
views
What is TCP spoofing?
I know about IP spoofing is it the same thing?
The question originated from the question
Is TCP more secure than UDP?
- 8,773
1
vote
2
answers
17k
views
How can someone spoof texts with my phone number?
A dear friend of mine in the U.S. recently told me that she had been quite hurt by the unkind texts I had sent her after the Holidays.
I do not have a texting mobile phone, nor do I do texting from ...
- 39
27
votes
5
answers
2k
views
Bank asked for a cross login?
I was creating a new bank account here in the US at HSBC's popular online bank...
You know the step where you have to verify the account you're sending from, by receiving two small test payments?
I ...
- 273
10
votes
3
answers
5k
views
Someone is making random calls spoofing my phone number. What to do?
For the past six months, I've experienced call-backs from foreign numbers (all within the EU) telling me that I had called them earlier. At first, I thought the calls are malicious. However, due to ...
- 131
6
votes
1
answer
46k
views
How to track a Spoofed SMS on Iphone
A mate pulled a quality prank on me the other day by sending me a SMS via a Spoofed number. He's bought a SMS gateway and can set the message ID/phone number to be 'God' (or whatever he wants(letters ...
- 11.5k
3
votes
2
answers
646
views
How can an end-user verify the authenticity of a third-party authentication provider's login form
Given the ubiquitous use of third party authentication providers in web apps today, how can end-users verify the authenticity of the login forms that collect their credentials? What's to stop a ...
- 133
2
votes
1
answer
816
views
Securely sending packets without them being spoofed
I'm working on a simple multiplayer game to break the ice with network programming. I have a system where if the player moves, the server receives a move packet that contains some stuff like the ...
- 23
81
votes
1
answer
24k
views
Is Starbucks spoofing me?
When I connected to Starbucks's Wi-Fi, I got a security alert from MS Outlook that looks like this:
I looked up secure.datavalet.io, but there's no mention of this thing anywhere. This does not ...
- 799
29
votes
2
answers
13k
views
Why is "hovering over" a link in an email considered safe? Or is it harmful?
We are using a browser based email client and the email content is in HTML.
One of my employers told us that if we receive a suspicious email with links, we have to hover over the link (to check ...
- 2,347
18
votes
3
answers
6k
views
Somebody is spoofing my email to send spam messages, and I have no idea how to block
Someone is using my Google Apps Email ID to send spam messages and I've received 2000+ undelivered and autorespond emails.
I have no idea how to block this because the spammer is also using my email ...
- 289
15
votes
3
answers
22k
views
How does SMS spoofing work practically?
I have been researching the web for information on how I can spoof an SMS myself, but I seem to find more on how to detect it, or how to use tools to do it rather on how to do it myself.
I have tried ...
- 151
12
votes
1
answer
26k
views
DNS Spoofing vs DNS Cache Poisoning
What is the difference between DNS Spoofing and DNS Cache Poisoning ???
It seems like there are little differences between two attacks, with an exception that DNS server is actually might cache the "...
- 223
7
votes
1
answer
42k
views
Is there any way to detect caller ID spoofing? [duplicate]
To be specific the main problem is that I want to detect if the caller ID of the incoming cal I get is real or spoofed? Most VoIP servers now allow their clients to use any caller ID they want. Also, ...
- 81
6
votes
2
answers
18k
views
Is it possible to un-spoof a spoofed caller ID?
I know that Trapcall allows mobile telephone users to forward their calls to a toll free number, which then forwards them back to the user's telephone, allowing them to see the caller ID. However, ...
- 185
5
votes
2
answers
5k
views
How to protect from WPAD attacks?
If you are in a Windows network, and you basically connect to a website ; And there is an attacker on Linux who changes the hostname to WPAD and configures WPAD.dat in his system, all your PC's ...
- 252
3
votes
3
answers
14k
views
Can iMessages be spoofed?
I am subject to legal proceedings where fake iMessages (not SMS) are being introduced by the opposing party and proclaiming to have come from me. I read about spoofing SMS messages. Is it possible for ...
user162388
3
votes
2
answers
13k
views
Can I spoof my user agent so that the type of device I'm using doesn't show up?
I was looking into spoofing a user agent, but all that has come up so far is spoofing the browser type. However, I can still see what kind of device I am using (tbh I'm not really even sure why ...
- 31
170
votes
10
answers
42k
views
Should I be concerned if the "FBI" has logged onto my Ubuntu VPS?
Yesterday, I was performing a bit of general maintenance on a VPS of mine, using the IPMI console my host provided.
Upon setting up SSH keys again via the IPMI console, I logged in via SSH and was ...
- 1,551
47
votes
4
answers
24k
views
Someone called someone else with my phone number
Sequence of events:
I didn't touch my phone all day (at work, busy day, know it didn't even come out of my pocket, but was on).
5:20pm I get a call by a guy asking me who I am and why I called him at ...
- 523
20
votes
3
answers
140k
views
Is it possible to make a phone call appear to come from another phone, even to the network provider?
Quick Question
Is it possible that I could call a mobile number, but have the call forwarded through another number active on a different phone that someone else has? I have had unlimited access to ...
- 1,039
16
votes
2
answers
4k
views
Are SSL browser sessions kept alive across requests?
When a client requests an SSL web resource via a browser (ie: a login request) and then follows up with additional requests are all the requests executed in the same SSL session? Or does the browser ...
- 311
13
votes
2
answers
100k
views
Sniffing, Snooping, Spoofing
Could somebody please explain to me the differences between the following attacks?
sniffing
snooping
spoofing
My professors used them all in his documents, but I'm not sure, if those are 3 ...
- 233
9
votes
2
answers
575
views
WPAD name collision attack victim: possible information leak
This is a home network: a wireless Linksys router serving around 5 wireless devices and 3 wired ones, two PCs and a PS4.
The router is setup to serve DHCP to client devices. It has a setting to ...
- 193
8
votes
3
answers
4k
views
Can an SSH server in password mode be impersonated if I ignore the fingerprint warning?
Assume that I never check the server fingerprint when logging in to an SSH server. This means that certain configurations of SSH can be impersonated. For example, I can log into a server that only has ...
- 379
7
votes
2
answers
6k
views
Can you force your PC or device to use only DNSSec-verified lookup results?
Okay, I'll admit something first-off: I don't really understand some of the practical aspects of how DNSSec protections work very well.(Even after reading resources like this.)
Well, I certainly ...
- 2,755
6
votes
3
answers
8k
views
Which is safer, GSM or CDMA?
I have read in the past (no sure where) that unfortunately there exist illegal devices that permit crooks to eavesdrop on GSM mobile phone conversations. I recently also heard that some people had ...
- 207
4
votes
1
answer
694
views
Why can't spoofed caller ID's be identified?
There are several posts here about how easy it is to spoof caller ID and that there is no way to detect it.
I did find one post suggesting the calls to 1-800 numbers could not be spoofed.
being ...
- 713
4
votes
3
answers
946
views
How can spoofing a certain MAC address enable sending probe requests that I was never connected to?
I was wondering how could my computer that uses a spoofed MAC address be sending probe requests for APs that I was never connected to?
Note:- The other computer with the original MAC address was ...
- 51
4
votes
1
answer
6k
views
TLS Authentication/OpenVPN/MITM Attacks on Public Wifi [duplicate]
My question is about how an SSL VPN connection such as OpenVPN is protected against MITM/Spoofing attacks on a public Wifi.
For example, if somebody has a 'pineapple' or router setup as a honeypot ...
- 61
4
votes
1
answer
3k
views
What is setuid based script root spoofing?
I'm reading this and I'm little confused. What exactly is this setuid based script root spoofing?
- 43
3
votes
3
answers
7k
views
How to detect & prevent fake emails?
I hope this question not same as this one:
E-mail can be made to appear like it came from a big organization?
I'm not asking how to protect brands and large organizations (Google, Yahoo, etc.), but ...
- 1,218
2
votes
2
answers
897
views
Isolating guest networks
I'm setting up a secondary guest wifi on my router and I want to make sure that it's impossible for clients connected to the guest wifi to access my primary network.
Initially, I used IP filtering ...
- 165
2
votes
1
answer
133k
views
Suspicious text received from my # but I did not send it - is there definitely a virus involved, and if so who has it, the sender or receiver?
A close friend texted me this morning asking if I meant to send that last text, noting it was suspicious. I asked for a screenshot of the text in question, and it is a text from my number with spam I ...
- 373
1
vote
2
answers
844
views
Can the source of an SMS message be spoofed? [duplicate]
My fiancé has a drunkard, terrible ex. She sent me a screen shot of her phone saying he sent her a text but it’s not on his phone. He said he didn’t send it. The number at the top appears to be his in ...
- 11
1
vote
1
answer
159
views
Best way to learn every way I am tracked online? [closed]
Is there a course or resource for a person with basic networking skills to see all ways a website like FB or Google can track and identify users + how to spoof them and look natural? Not for malicious ...
1
vote
1
answer
6k
views
It's there a way to bypass https nowadays?
It's there a way to bypass https (using mitm attacks) on browsers like chrome, firefox, etc?
I know it could be done in some way, exploiting the NTP port, but we need the interaction of the victim. ...
- 389
0
votes
1
answer
543
views
Securing a Websocket Connection in case of XSS Vulnerability
Goal
Authenticate the Client via HTTP Request.
Authenticate the Client's WebSocket connection.
Prevent exploitation of WebSocket connection(when a XSS Vulnerability is present on website).
How I'm ...
- 3