Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [sniffer]

A sniffer is a program that monitors and analyzes network traffic, detecting bottlenecks and problems.

Filter by
Sorted by
Tagged with
0 votes
2 answers
62 views

Is an Ethernet FTP server on a local network safe if an attacker can't access the router?

I'm having trouble understanding certain security concepts and I was wondering if someone could help me out with some questions. Imagine this setup: A home router with a very strong password, that ...
user avatar
5 votes
1 answer
2k views

Is packet sniffing or other manipulation possible at a DSL or cable wire between my modem and the ISP?

Can a DSL or cable wire between my modem and the ISP be manipulated in any way at the hardware level to sniff the traffic data? For example by neighbours with physical access to the wires in a big ...
user avatar
  • 61
15 votes
3 answers
3k views

Can an HTTPS request be sent twice?

When sniffing network traffic, one can see an HTTPS packet and all its (encrypted) data. I am wondering what would happen if this packet is copied and then re-sent. Is there a protocol at some layer ...
user avatar
  • 161
0 votes
0 answers
66 views

Meaning of Broadcasting WAN status in Cain ARP Poison Routing

I was going through Cain and Abel's Manual to perform an ARP Poison Routing attack, also known as APR and it mentioned that while performing the attack between a host and gateway, we could see '...
user avatar
0 votes
0 answers
118 views

Is it possible to sniff packets from a remote IP? [duplicate]

For a while I have been playing around with packet sniffing on my local network (using an ARP poisoning attack to redirect packets to me, then relaying them and viewing them in wireshark). However, I ...
user avatar
2 votes
1 answer
148 views

Processing Exceptionally High Volume Singular Flows

I wanted to know if anyone had experience sensoring single flows that generate 90 kpps or upward of traffic. My conundrum is that I use tools which I would like to be able to properly see an entire ...
user avatar
  • 123
0 votes
1 answer
802 views

At times bettercap ARP sniffing works great and at times not at all, what would be the reason?

I like to track the websites my daughter goes to in order to have some control. So I installed bettercap and setup a script to start it to sniff the HTML URLs being accessed (well, the reverse URL ...
user avatar
0 votes
1 answer
103 views

How To Validate Secure Traffic from Chrome with Element To Matrix.org on Linux

Are you familiar with the Element chat system of https://app.element.io ? Are you familiar with its connections to Matrix.org (for a free account)? Is there a way that I can sniff this traffic on the ...
user avatar
  • 265
1 vote
0 answers
156 views

How do I prevent against man-in-the-middle, specifically the packet injection attack? [closed]

I suspect that I am being targeted in a man-in-the-middle attack from the ISP or in-between of the fiber cable transit or the node by sniffer hardware that detects and injects the malicious packets. I ...
user avatar
1 vote
2 answers
212 views

Detect and optionally block a certain string in network traffic on Windows 10

Suppose I have some important text data on my computer, like a plain text password y5278dhk28ds and I have malware on my PC that periodically searches for sensitive data and sends that data to ...
user avatar
  • 111
1 vote
1 answer
98 views

how to prevent multicast packets from being snooped

As we know, any user can send IGMP to join a multicast group, which means an unauthirized user can capture any multicast packets in a traditional LAN. I want to prevent the multicast packets from ...
user avatar
2 votes
1 answer
714 views

Can my work computer sniff my home network? [duplicate]

Can my work computer sniff the websites that my parents personal computer go through? I know this would be very unethical for the company to do so but I never realized this is POTENTIALLY possible ...
user avatar
1 vote
0 answers
297 views

Sniff the traffic of sim card [closed]

I wonder if Sim Card traffic can be sniffed? I mean only the internet connection when it makes to requests to several websites. Sniff those traffic by WireShark maybe? P.S: not messages, only network ...
user avatar
0 votes
1 answer
122 views

Is it possible to infer advanced cookie properties like expiration from Wireshark

I want to perform a cookie injection attack for demonstration purposes. I could achieve this using Firefox Cookie-Editor extension. However, the attack can only succeed if I enter the cookie name, ...
user avatar
  • 3
0 votes
1 answer
601 views

Router administration page is served over HTTP

My wireless router admin page does not include https option. It is always served over http. This is obviously a concern in case someone is sniffing the network and can read my password in plain text. ...
user avatar
  • 105
7 votes
1 answer
3k views

Is my router spying on my network traffic?

I got a new TP-Link router a couple months ago, and configured it to use the OpenDNS domain servers for basic content filtering across all household WiFi devices. Everything seemed to be great. ...
user avatar
  • 211
2 votes
0 answers
98 views

I have a water heater with a wireless transmitter for changing the temp, how can I sniff the commands sent between them? [closed]

Long story short I'm automating a lot of my stuff at home and as part of that I'd like to be able to replicate the commands sent to my unit (https://www.rinnai.com.au/wp-content/uploads/2017/09/...
user avatar
0 votes
1 answer
325 views

Need Explaination to Xerosploit's Sniffer Function code

I'm looking at the sourcecode of Xerosploit, and there is a piece of code I don't understand: cmd_snif = os.system("xettercap " + target_parse + target_ips + " -P MYSQL, SNPP, DHCP, WHATSAPP, ...
user avatar
2 votes
2 answers
152 views

Is using a network sniffer for host discovery a viable option?

Would a packet sniffer like tcpdump be effective for network host discovery and if so how effective is it compared to more active methods such as the infamous network mapper nmap?
user avatar
2 votes
0 answers
195 views

How to identify the communication protocol used in a wireless device?

I really hope that this is the right place to ask. I need to analyze a baby monitor for any security or privacy weaknesses. The spec sheet of the baby monitor says, that it uses the ISM 2400~2483.5 ...
user avatar
2 votes
1 answer
268 views

How to go from wifi password to computer access

In looking at What can hackers do with a wifi password?, it is said: Simply said, if someone has your Wifi password, they have full access to all connected computers and devices within your network....
user avatar
  • 548
1 vote
3 answers
1k views

How can I capture all data from a specific device on my network?

I have an iPhone that is connected to my Wi-Fi at home. I want to capture ALL traffic from that iPhone (because it's my network) and record it and view it. I don't have physical access to the device. ...
user avatar
4 votes
2 answers
8k views

How to intercept http/https requests done by an Android app in plain text? [duplicate]

When I give an android app internet permission and read access to my files, malicious software can send my personal data (pictures and video) to a remote server without me being aware of it. Is ...
user avatar
  • 185
2 votes
1 answer
193 views

What has to occur for a hacker to monitor traffic from my LAN?

I understand that if you change your network card from managed mode to monitor mode you will be able to monitor and sniff the traffic of your local network plus all the access points around you. My ...
user avatar
1 vote
0 answers
110 views

Device location in LTE/GSM packets? [closed]

I'd like to know if any of the LTE or GSM packets have the GPS coordinates of a given device or any information about its geolocation. I mean, there must be a way to locate devices (maybe ...
user avatar
  • 111
0 votes
1 answer
506 views

How can I decrypt traffic on a WPA encrypted network?

I am connected to a WPA/WPA2 Access Point and I want to sniff all wireless traffic inside that network. How can I decrypt the traffic even though I don't have the pre-shared key?
user avatar
1 vote
0 answers
449 views

Sniffing Tool Using Monitor Mode [closed]

As I understand it (fix me if I am wrong), there are two main ways of sniffing traffic from my wifi. I can use ARP Spoofing, to poison a device on my network then capture all of its communication. I ...
user avatar
  • 111
1 vote
1 answer
827 views

Passive WiFi sniffing without associating to the AP

Suppose that I have a WiFi adapter that is in range of several APs and clients, all sharing the same channel and all using WPA2 encryption. I know all their passwords. I'd like to sniff on all of them ...
user avatar
1 vote
2 answers
707 views

Is there a way to tell, when looking at a packet, that an aircrack-ng attack happened?

I'm trying to understand how to find these attacks when using a packet sniffer (specifically using Omnipeek). Is there a way to look at a packet and know that this type attack happened? I want to find ...
user avatar
1 vote
1 answer
237 views

How is this iphone VPN app working?

I am using an iphone app called tunnelbear. I was wondering if my ISP gets to see my network traffic (aka the URLs I am visiting) when I am using the VPN. I did a small experiment using Paros ...
user avatar
  • 13
2 votes
2 answers
6k views

Is it possible to sniff MAC addresses from a client that is not connected to an AP?

A similar question was answered here for sniffing MAC addresses from clients connected to 802.11 wireless access points. My question is, is it possible to sniff MAC addresses from clients which are ...
user avatar
1 vote
2 answers
33k views

Airodump-ng occationally not showing networks near me

I'm brand new to the field of pen testing, so please excuse my ignorance and the potential asking of a question that already exists. As I stated in the title, there are times when I run airodump-ng [...
user avatar
  • 111
0 votes
1 answer
2k views

What are the core differences between Airodump-ng, Wireshark, and TCPdump? [closed]

As all three tools are packet sniffers, I would have expected them to give me the same results when I use them to monitor my home's network, but they don't. Therefore what are the core differences and ...
user avatar
  • 659
5 votes
1 answer
2k views

Where would I place a sniffer to capture data in a home network with the following topology?

I am aware of the various techniques that there are to sniff around a network that has Hubs or Switches (port mirroring, hubbing out, use of taps), but I am not sure which method would be more ...
user avatar
  • 659
0 votes
1 answer
403 views

IPv6 Blocking my Connection to the Internet [closed]

I am having problems with somebody who has either hacked or is trying to hack into my computer. To connect to the internet I tethered my phone to either my desktop or laptop, but internet ...
user avatar
1 vote
1 answer
1k views

How do I capture Wifi traffic in the wifi channel spectrum?

How could I capture traffic from every AP near me? For example using tcpdump or tshark and a channel hopping script(Channel 1-11). Is this possible? I have tried with tcpdump and a channel hopping ...
user avatar
1 vote
0 answers
196 views

DNS Leak Detection

While checking my personal VPN server for DNS leaks (and finding them), it got me thinking. If I'm a network owner who hosts a website, and I sniff and log all in/outbound on my web servers, is there ...
user avatar
  • 131
2 votes
2 answers
12k views

Is there any way capture HTTPS Request with Python?

I created a simple python script to capture HTTP request. I captured HTTP Requests with my python script. But I can't capture HTTPS requests. I just want to capture information about URLs. I used ...
user avatar
  • 151
1 vote
0 answers
328 views

Displaying a report of top visited websites per period (HTTP and HTTPS) [closed]

I have a MikroTik router that connects to a network with multiple endpoints. All the WAN traffic flows through this router and I would like to be able to monitor (not necessarily filter) the ...
user avatar
0 votes
1 answer
1k views

Sniffing the whole traffic within a network range

How is it possible to sniff the whole traffic within a network range even if it's beyond your subnet scope? For instance, consider your machine having the IP address of 172.16.96.25, but you need to ...
user avatar
1 vote
2 answers
633 views

Sniffing the data around me

Scenario: no router, just a laptop network card turned in monitor mode. (imagine you are in the bus or train) In this scenario can I see all the data that is going through air around me? Can I ...
user avatar
2 votes
0 answers
366 views

What are your favorite BLE (Bluetooth Low Energy) sniffing tools? (Hardware and Software) [closed]

I will soon need to debug BLE communication for a newly developed BLE device. What are your favorite BLE (Bluetooth Low Energy) sniffing tools? (Hardware and Software)
user avatar
0 votes
1 answer
821 views

Wireless - why can't i view ARP broadcasts in monitor mode on encrypted networks?

I'm running a packet capture on my test client (running in managed mode) and also on my attacking machine (running in monitor mode). It is my understanding that 802.11 networks using WEP encryption ...
user avatar
  • 3
1 vote
2 answers
2k views

Can you sniff packets from a router using wireshark?

If you have a NIC that supports promiscuous mode is this possible? To my knowledge, I read that a switch uses a broadcast domain to broadcast packets, but if a router does not use this, is it still ...
user avatar
  • 51
0 votes
1 answer
758 views

How to sniff ECDH HTTPS traffic?

Our company currently sniffs encrypted RSA traffic using a network tap. Would this still be possible using ECDH? I guess not. Are there commercial alternatives, like placing an agent on the ...
user avatar
  • 1
0 votes
1 answer
121 views

User authentication protected against all attack vectors

Having spent a lot of time researching, I am unable to confirm whether my system is secure enough. Users have a mobile phone and login to a central authorization server by passing their username, ...
user avatar
0 votes
4 answers
10k views

How do hackers intercept messages? [closed]

It is often said that the main reason of using encryption is to unable middlemen (listeners) to understand the messages exchanged between parties even if they intercept it. But it is overlooked to ...
user avatar
  • 185
0 votes
1 answer
1k views

Proxy to remove TLS

I tried to sniff HTTP connections via Fiddler, which acts as a HTTP proxy. But the site is redirecting http requests to https. Is there a way to prevent this, either with fiddler or with any other ...
user avatar
  • 1,689
2 votes
1 answer
2k views

Which cipher suites are proposed by client and which one chosen by server?

I've sniffed several TLS/SSL communication with Wireshark, and I want to find out which cipher suites are proposed by client and which one chosen by server. How do I do that? Here you have some of ...
user avatar
1 vote
0 answers
875 views

Decrypting a TLS/SSL traffic with Wireshark

I am trying to decrypt a TOLS/SSL traffic with Wireshark. When I start the sniffer I do get some packets with TLSv1.2 protocols but I can't decrypt them. Have seen this post, but the tutorial provided ...
user avatar

1
2 3 4 5