Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [sniffer]

A sniffer is a program that monitors and analyzes network traffic, detecting bottlenecks and problems.

0
votes
1answer
48 views

Need Explaination to Xerosploit's Sniffer Function code

I'm looking at the sourcecode of Xerosploit, and there is a piece of code I don't understand: cmd_snif = os.system("xettercap " + target_parse + target_ips + " -P MYSQL, SNPP, DHCP, WHATSAPP, ...
2
votes
2answers
84 views

Is using a network sniffer for host discovery a viable option?

Would a packet sniffer like tcpdump be effective for network host discovery and if so how effective is it compared to more active methods such as the infamous network mapper nmap?
2
votes
0answers
57 views

How to identify the communication protocol used in a wireless device?

I really hope that this is the right place to ask. I need to analyze a baby monitor for any security or privacy weaknesses. The spec sheet of the baby monitor says, that it uses the ISM 2400~2483.5 ...
2
votes
1answer
174 views

How to go from wifi password to computer access

In looking at What can hackers do with a wifi password?, it is said: Simply said, if someone has your Wifi password, they have full access to all connected computers and devices within your network....
0
votes
3answers
98 views

How can I capture all data from a specific device on my network?

I have an iPhone that is connected to my Wi-Fi at home. I want to capture ALL traffic from that iPhone (because it's my network) and record it and view it. I don't have physical access to the device. ...
1
vote
2answers
855 views

How to intercept http/https requests done by an Android app in plain text? [duplicate]

When I give an android app internet permission and read access to my files, malicious software can send my personal data (pictures and video) to a remote server without me being aware of it. Is ...
2
votes
1answer
118 views

What has to occur for a hacker to monitor traffic from my LAN?

I understand that if you change your network card from managed mode to monitor mode you will be able to monitor and sniff the traffic of your local network plus all the access points around you. My ...
1
vote
0answers
59 views

Device location in LTE/GSM packets? [closed]

I'd like to know if any of the LTE or GSM packets have the GPS coordinates of a given device or any information about its geolocation. I mean, there must be a way to locate devices (maybe ...
0
votes
1answer
260 views

How can I decrypt traffic on a WPA encrypted network?

I am connected to a WPA/WPA2 Access Point and I want to sniff all wireless traffic inside that network. How can I decrypt the traffic even though I don't have the pre-shared key?
1
vote
0answers
304 views

Sniffing Tool Using Monitor Mode [closed]

As I understand it (fix me if I am wrong), there are two main ways of sniffing traffic from my wifi. I can use ARP Spoofing, to poison a device on my network then capture all of its communication. I ...
0
votes
1answer
423 views

Passive WiFi sniffing without associating to the AP

Suppose that I have a WiFi adapter that is in range of several APs and clients, all sharing the same channel and all using WPA2 encryption. I know all their passwords. I'd like to sniff on all of them ...
1
vote
2answers
351 views

Is there a way to tell, when looking at a packet, that an aircrack-ng attack happened?

I'm trying to understand how to find these attacks when using a packet sniffer (specifically using Omnipeek). Is there a way to look at a packet and know that this type attack happened? I want to find ...
1
vote
1answer
189 views

How is this iphone VPN app working?

I am using an iphone app called tunnelbear. I was wondering if my ISP gets to see my network traffic (aka the URLs I am visiting) when I am using the VPN. I did a small experiment using Paros ...
3
votes
2answers
3k views

Is it possible to sniff MAC addresses from a client that is not connected to an AP?

A similar question was answered here for sniffing MAC addresses from clients connected to 802.11 wireless access points. My question is, is it possible to sniff MAC addresses from clients which are ...
1
vote
2answers
3k views

Airodump-ng occationally not showing networks near me

I'm brand new to the field of pen testing, so please excuse my ignorance and the potential asking of a question that already exists. As I stated in the title, there are times when I run airodump-ng [...
0
votes
1answer
834 views

What are the core differences between Airodump-ng, Wireshark, and TCPdump? [closed]

As all three tools are packet sniffers, I would have expected them to give me the same results when I use them to monitor my home's network, but they don't. Therefore what are the core differences and ...
4
votes
1answer
1k views

Where would I place a sniffer to capture data in a home network with the following topology?

I am aware of the various techniques that there are to sniff around a network that has Hubs or Switches (port mirroring, hubbing out, use of taps), but I am not sure which method would be more ...
0
votes
1answer
217 views

IPv6 Blocking my Connection to the Internet [closed]

I am having problems with somebody who has either hacked or is trying to hack into my computer. To connect to the internet I tethered my phone to either my desktop or laptop, but internet ...
1
vote
1answer
830 views

How do I capture Wifi traffic in the wifi channel spectrum?

How could I capture traffic from every AP near me? For example using tcpdump or tshark and a channel hopping script(Channel 1-11). Is this possible? I have tried with tcpdump and a channel hopping ...
1
vote
0answers
144 views

DNS Leak Detection

While checking my personal VPN server for DNS leaks (and finding them), it got me thinking. If I'm a network owner who hosts a website, and I sniff and log all in/outbound on my web servers, is there ...
1
vote
1answer
4k views

Is there any way capture HTTPS Request with Python?

I created a simple python script to capture HTTP request. I captured HTTP Requests with my python script. But I can't capture HTTPS requests. I just want to capture information about URLs. I used ...
1
vote
0answers
238 views

Displaying a report of top visited websites per period (HTTP and HTTPS) [closed]

I have a MikroTik router that connects to a network with multiple endpoints. All the WAN traffic flows through this router and I would like to be able to monitor (not necessarily filter) the ...
0
votes
1answer
590 views

Sniffing the whole traffic within a network range

How is it possible to sniff the whole traffic within a network range even if it's beyond your subnet scope? For instance, consider your machine having the IP address of 172.16.96.25, but you need to ...
1
vote
2answers
498 views

Sniffing the data around me

Scenario: no router, just a laptop network card turned in monitor mode. (imagine you are in the bus or train) In this scenario can I see all the data that is going through air around me? Can I ...
2
votes
0answers
306 views

What are your favorite BLE (Bluetooth Low Energy) sniffing tools? (Hardware and Software) [closed]

I will soon need to debug BLE communication for a newly developed BLE device. What are your favorite BLE (Bluetooth Low Energy) sniffing tools? (Hardware and Software)
0
votes
1answer
432 views

Wireless - why can't i view ARP broadcasts in monitor mode on encrypted networks?

I'm running a packet capture on my test client (running in managed mode) and also on my attacking machine (running in monitor mode). It is my understanding that 802.11 networks using WEP encryption ...
1
vote
2answers
1k views

Can you sniff packets from a router using wireshark?

If you have a NIC that supports promiscuous mode is this possible? To my knowledge, I read that a switch uses a broadcast domain to broadcast packets, but if a router does not use this, is it still ...
0
votes
1answer
515 views

How to sniff ECDH HTTPS traffic?

Our company currently sniffs encrypted RSA traffic using a network tap. Would this still be possible using ECDH? I guess not. Are there commercial alternatives, like placing an agent on the ...
0
votes
1answer
57 views

User authentication protected against all attack vectors

Having spent a lot of time researching, I am unable to confirm whether my system is secure enough. Users have a mobile phone and login to a central authorization server by passing their username, ...
-1
votes
4answers
5k views

How do hackers intercept messages? [closed]

It is often said that the main reason of using encryption is to unable middlemen (listeners) to understand the messages exchanged between parties even if they intercept it. But it is overlooked to ...
0
votes
1answer
564 views

Proxy to remove TLS

I tried to sniff HTTP connections via Fiddler, which acts as a HTTP proxy. But the site is redirecting http requests to https. Is there a way to prevent this, either with fiddler or with any other ...
2
votes
1answer
1k views

Which cipher suites are proposed by client and which one chosen by server?

I've sniffed several TLS/SSL communication with Wireshark, and I want to find out which cipher suites are proposed by client and which one chosen by server. How do I do that? Here you have some of ...
1
vote
0answers
779 views

Decrypting a TLS/SSL traffic with Wireshark

I am trying to decrypt a TOLS/SSL traffic with Wireshark. When I start the sniffer I do get some packets with TLSv1.2 protocols but I can't decrypt them. Have seen this post, but the tutorial provided ...
2
votes
1answer
1k views

Sniffing TLS/SSL communication with Wireshark, possible? [duplicate]

I am trying to snif a SSL/TLS communication and thought about doing it with Wireshark. I've tried to do it and sniffed some with TLSv1.2 protocols, is that the communication? If so, how do I identify ...
2
votes
3answers
919 views

Sniff Android and IOS app traffic for privacy audit

I am trying to figure out a way to sniff Http and Https traffic from app, to see who the app is sharing data with, and what data the app is sharing. The information should be used to audit whether the ...
0
votes
2answers
2k views

Iterate through and decode Dot11Elt layers — Scapy

OBJECTIVE I want to iterate through the Dot11Elt layers of a beacon frame that I captured with Scapy. I also want to decode the .info of each ID layer. def packet_handler(packet) : if packet....
4
votes
1answer
3k views

Sending Probe Request Frames | Receving Probe Response — Scapy

OBJECTIVE Send probe request frame subtype=4 and receive probe response subtype=5 with Scapy Ultimate goal is to detect access points nearby via Scapy ( not by sniffing beacon frames ) The object ...
2
votes
2answers
256 views

Relaxed access to tcpdump

I'm looking to do some packet sniffing on a computer that I do not have privileged access on. I am considering asking the admins to allow users in a specific group access to tcpdump. Specifically, I ...
3
votes
1answer
5k views

Can a .DER be converted to a .PFX / .P12 ?

Burp-Suite's http://burp/cert:8080 web-interface for downloading the CA Certificate only provides a .der encoded certificate, but for a particular use-case scenario I require a PKCS#12 .pfx/.p12. I ...
2
votes
1answer
689 views

Blind SQL Injection using OOB DNS Practical Sniffing Help

I was looking at Excellent Article from Defcon 15's which was Data retrieval over DNS during SQL Injection Attacks. (https://www.youtube.com/watch?v=iQDw0hK_eFw). In this the speaker demonstrated the ...
2
votes
3answers
24k views

How can I extract the certificate from this pcap file?

I have a pcap file of 14 sniffed SSL packets. I uploaded it here: ssl.pcap I opened it with wireshark. I see the 14 packets. The largest of seems to contain a self signed certificate (as it is made ...
0
votes
1answer
105 views

Unsecure FTP with Encrypted file and Wireshark leakage

Hi i was wandering if it is possible to have a password leaked to an encrypted file on an anon ftp server with r-x-w permissions. So for example i have a file encrypted using gpg and when opened on ...
2
votes
2answers
2k views

How to protect against request intercepting and parameter-tampering? [duplicate]

My problem is that I made an app and I am making PHP Requests. I just realized that you can sniff everything on Android with "Packet Capture". How can I make my app more secure? I thought about ...
0
votes
1answer
308 views

Encrypted traffic analysis

If i tunnel any tcp traffic true ssh or any ssl encrypted protocol will some one capturing the traffic capable of do some kind of offline decrypting using the capture file ?? What technic they use to ...
24
votes
3answers
6k views

How to deal with WPE users

I own a chat room and some users use a program Winsock Packet Editor, "WPE PRO". With it they manage to bypass chat rules, like they can't be muted or kicked, and they can send messages fast ...
1
vote
0answers
43 views

snort spp_sfPortscan Preprocessor Customization [closed]

I am working in snort 2.9.8.0. I want to modify the snort code for Portscanning Detection,i.e spp_sfPortscan.c and its related code to build a customized portScan detector. Ex:suppose A is scanning ...
3
votes
2answers
89 views

Traffic capture on a public server

I have a VPS where I'm hosting a web app built by PHP. Yesterday I Looked to the apache log and I found that someone running a scanner to guess some urls like: /wp-admin /joomla /mysql and so on ...
5
votes
2answers
175 views

Malicious packet that attacks packet sniffers?

Is it possible to crash a packet sniffer through a specially-formed packet to stop website administrators from tracking down the source? If it is possible, has it been done before? Or is it just not ...
2
votes
2answers
317 views

Sniff network packets that don't talk to my computer?

How would one sniff wireless network packets that do not pass directly through my computer- without access the the AP or router? I want to be able to sniff for network traffic (even while ...
3
votes
1answer
1k views

OS fingerprinting [closed]

I have been asked to write a small tool that detects the running OS on a victim device. The tool should be able to fingerprint Linux versus Android versus iOS. Extra credit for version info. It needs ...