Tag Info

Hot answers tagged

33

First of all that would entirely depend on the encryption used by the access point. There are several types of possible encryption. Mostly on consumer wireless access points these are: WEP WPA WPA2 WPS WEP Let's first dive into WEP. WEP was the first algorithm used to secure wireless access points. Unfortunately it was discovered that WEP had some ...


28

How does https work? Https is based on public/private-key cryptography. This basically means that there is a key pair: The public key is used for encryption and the secret private key is required for decryption. A certificate is basically a public key with a label identifying the owner. So when your browser connects to an https server, it will answer with ...


23

When you feel your local computer network is insecure, there are five main approaches. Ensure that your computer and the destination computer use encrypted network protocols. (e.g. IPSEC) This encrypts any and all traffic from your machine to the destination machine over the whole of it's journey. Establish an encrypted tunnel between your computer and a ...


23

Monitor mode: Sniffing the packets in the air without connecting (associating) with any access point. Think of it like listening to people's conversations while you walk down the street. Promiscuous mode: Sniffing the packets after connecting to an access point. This is possible because the wireless-enabled devices send the data in the air but only "mark" ...


21

For telecommunications, checkout GSM, CDMA, TDMA, and EDGE. The two competing protocols in the United States are GSM and CDMA. The resources linked below are lacking when it comes to CDMA, but using site:defcon.org and site:blackhat.com in your Google searches will turn up some presentations. For interception of GSM, I refer you to a white paper on ...


19

An attacker can always determine the client's MAC address if they can sniff packets to or from the client. This is true regardless of whether encryption is used or not. The MAC address is in the outer encapsulation layer of the 802.11 packet, and there is no encryption applied to that level. Here's a good link at Microsoft that lays out the packet ...


16

You can't. It doesn't matter whether the wifi is encrypted or not: you can't know whether the access point is trustworthy. A WPA2 access point with a strong password doesn't help when the access point itself is a rogue access point put up by someone who may or may not be the café or hotel owner. And yes, it happens — people put up open access points with ...


15

Your case is common in the corporate world, it is usually described as corporate MiTM. When you connect to the Internet from inside your network, you're likely connecting to a gateway/router the belongs to your company first. That router can simply hand you public key in a "fake" certificate whenever you connect to an SSL-enabled site and fool your browser ...


14

Capturing packets already produces an output file (a capture file, actually) which includes packet contents, timing information, headers, etc. If you want to separate these packets into individual streams, a program like wireshark can do the appropriate searching and filtering for you. It can even decrypt SSL/TLS traffic if you have the certificate key. If ...


13

Most likely yes, but it depends Much like PATA, SCSI, and Ethernet devices, USB devices don't directly connect to the computer. They connect to a Host Controller that manages all signaling and communication. All ports are connected to something called a Root Hub, and to each Root Hub you may connect other hubs and subsequently more hubs. Each of these hubs ...


12

One way of checking this would be to run a packet sniffing tool such as wireshark, as this can give you information about the protocols being used, and can show you similar information to what someone else would see if they're sniffing your connection. I'm presuming here that Battle.NET uses HTTP(S) for authentication so essentially you'd be looking for ...


12

Promiscuous Mode: Capture packets on a network that you have connected to. This is likely what you need to be in if you want to analyze packets (Wireshark, tcpdump, etc.) Monitor Mode: Capture packets regardless of connected network. No association to AP needed (and no authentication). Because it is not connected to a network, you can't process the ...


11

If I'm using websites that do not use HTTPS, but I'm on a WEP-protected Wi-Fi network, are my cookies safe from being sniffed by third-parties? No. Outsiders can crack WEP networks almost as if they weren't encrypted at all, these days. Insiders have even more ease of access. Even on WPA/WPA2 networks, there are still exploits that enable insiders to ...


11

Sniffing and recording the signal is certainly doable, since that's what both cell phones and base stations do all day long. Now the tricky point is that communications are encrypted, and decrypting the data from the outside can prove tricky. "3G" is a wide term, but (normally) 3G communications use the block cipher KASUMI. The best known cryptanalytic ...


10

The hardware tool that is suited to his is the Universal Software Radio Peripheral (vendor site). You can get a leg up on decoding the transmissions by looking at the work done for the OpenBTS system. So, hardware-wise it's commodity equipment, though a few thousand dollars because it's not very common. Software wise, the groundwork is already there to pull ...


10

TL;DR: FaceNiff probably exploits WPA's "Hole 192" and uses ARP poisoning to set up a Man-in-the-Middle attack. The steps, in short, are: Eve uses the Group Temporal Key (GTK) to inject ARP packets into the network, with the network's gateway IP paired to her MAC address. Clients register Eve's MAC address as their new gateway. Clients send packets ...


10

If an attacker has the password, then they could, for example, use Wireshark to decrypt the frames. (Note, however, there's no need to have a WEP password since it is a completely broken security algorithm. WEP keys can be extracted from the encrypted traffic by merely capturing enough packets. This usually only takes a few minutes. Also, keep in mind ...


9

"Credentials" and "Internet Cafe" in the same sentence... Any publicly available computer is susceptible to be the host of a keylogger. From a slightly paranoid point of view, your credentials are toast as soon as you type them on the keyboard, regardless of what happens on the network. Now if you bring your own machine (e.g. the "Internet Cafe" is ...


9

I think that -Tfields -eframe.protocols would be the closest thing you'll get. The output looks something like this: eth:ip:tcp:http eth:ip:tcp eth:ip:tcp:http:media eth:ip:tcp eth:ip:udp:nbdgm:smb:browser eth:ip:tcp eth:arp eth:arp eth:ipv6:udp:http eth:ip:udp:http As it can be seen the information displayed will vary a bit depending on which protocol ...


9

Machines create noise that maybe be detected by an attacker. If this noise undermines a physical cryptosystem then its called a side channel attack which is a very interesting and diverse research topic. Like it or not, passwords are the gold standard and the human interface devices we use are very noisy. The electromagnetic noise produced by typing on ...


9

There's no way to easily automate this in any useful way, because protocols are designed by humans. As such, they don't really follow any set pattern or rules. You're going to have to put the brain-work in yourself to dissect them. However, there are some tricks: Use Wireshark to separate out individual conversations and identify the high-level ...


9

There has been some work done that I've heard of like anti-sniff, which looks to detect machines in promiscuous mode using timing information. The idea being that machines in promiscuous mode will have to process all packets that they see so if there are large amounts of traffic that need processed the system will be busy and slower to respond to directed ...


8

Have you tried tshark -r test.cap -q -z io,phs It will give you a hierarchical list of protocols, not sure if it will suite you needs. =================================================================== Protocol Hierarchy Statistics Filter: frame frame frames:433 bytes:290520 eth ...


8

There is no good answer to your question. The obvious answer doesn't work. The obvious way to test this is simply sniff the wire, and see if your password goes across it. You can run simple tools like 'ngrep' or 'Snort' to search the network for you, so that you don't have to deal with complicate tools. But this doesn't work. This only tells you if the ...


8

If the sniffer has all the packets that you sent, he can reconstruct all the data (files, mails, whatever) that you sent, for the simple reason that he has everything that the intended recipient has. If the sniffer only has some of packets, then he can still reconstruct part of your traffic — files with holes, so to speak. For example, if he has only some of ...


8

In order to trace back the source you first need to figure out which device is generating the traffic. The best, in my opinion, would be to set up a flow collector of some sort. There are generally two ways to do this, Exporting flows from the device Software analysis to generate flows Most high end network gear will generate some kind of flow record, ...


8

It is possible to sniff packets on unswitched ethernet or wifi completely passively. Tools like the Throwing Star Lan Tap make this even easier. In this passive case, there is nothing you can really do about it. However if you are on a switched lan, any sniffer would have to start poisoning ARP caches, even if only on the switch. This is something that you ...


8

WPA2 is the only secure method. WEP and WPA are "broken". Also, WEP is easier to crack than WPA. However, any security, even WEP, is better than no security as it will effectively prevent opportunistic connections to your network. I just checked and indeed the new Mac Books Pro don't have an Ethernet port. All I can say is WTF?!?


8

One thing to realise is that you can't completely block what you kids do on the Internet and probably the best thing to do is to try and educate them on avoiding sites you think they shouldn't visit and also how to recognise dangerous situations (e.g. strangers looking to message them or meet up in real life). That said there are products which can help to ...


7

Assuming that users do not click through cert warnings (and assuming that you are running an unmodified client), the answer is: No, the proxy cannot decrypt the data. For a detailed explanation of how HTTPS prevents a man-in-the-middle from decrypting your traffic, see any standard resource on SSL/TLS, e.g., How is it possible that people observing an ...



Only top voted, non community-wiki answers of a minimum length are eligible