Questions tagged [sniffer]

A sniffer is a program that monitors and analyzes network traffic, detecting bottlenecks and problems.

Filter by
Sorted by
Tagged with
0
votes
0answers
23 views

How can TLS/HTTPS remain secure if the entire transmission is monitored? [duplicate]

Okay, so I'm pretty sure this question comes from a fundamental misunderstanding of how HTTPS works, but here goes: Say that someone has hooked into the "internet line" coming from your home so that ...
0
votes
1answer
29 views

Is it possible to infer advanced cookie properties like expiration from Wireshark

I want to perform a cookie injection attack for demonstration purposes. I could achieve this using Firefox Cookie-Editor extension. However, the attack can only succeed if I enter the cookie name, ...
0
votes
1answer
121 views

Router administration page is served over HTTP

My wireless router admin page does not include https option. It is always served over http. This is obviously a concern in case someone is sniffing the network and can read my password in plain text. ...
5
votes
1answer
716 views

Is my router spying on my network traffic?

I got a new TP-Link router a couple months ago, and configured it to use the OpenDNS domain servers for basic content filtering across all household WiFi devices. Everything seemed to be great. ...
2
votes
0answers
53 views

I have a water heater with a wireless transmitter for changing the temp, how can I sniff the commands sent between them? [closed]

Long story short I'm automating a lot of my stuff at home and as part of that I'd like to be able to replicate the commands sent to my unit (https://www.rinnai.com.au/wp-content/uploads/2017/09/...
0
votes
1answer
85 views

Need Explaination to Xerosploit's Sniffer Function code

I'm looking at the sourcecode of Xerosploit, and there is a piece of code I don't understand: cmd_snif = os.system("xettercap " + target_parse + target_ips + " -P MYSQL, SNPP, DHCP, WHATSAPP, ...
2
votes
2answers
89 views

Is using a network sniffer for host discovery a viable option?

Would a packet sniffer like tcpdump be effective for network host discovery and if so how effective is it compared to more active methods such as the infamous network mapper nmap?
2
votes
0answers
58 views

How to identify the communication protocol used in a wireless device?

I really hope that this is the right place to ask. I need to analyze a baby monitor for any security or privacy weaknesses. The spec sheet of the baby monitor says, that it uses the ISM 2400~2483.5 ...
2
votes
1answer
177 views

How to go from wifi password to computer access

In looking at What can hackers do with a wifi password?, it is said: Simply said, if someone has your Wifi password, they have full access to all connected computers and devices within your network....
0
votes
3answers
172 views

How can I capture all data from a specific device on my network?

I have an iPhone that is connected to my Wi-Fi at home. I want to capture ALL traffic from that iPhone (because it's my network) and record it and view it. I don't have physical access to the device. ...
1
vote
2answers
1k views

How to intercept http/https requests done by an Android app in plain text? [duplicate]

When I give an android app internet permission and read access to my files, malicious software can send my personal data (pictures and video) to a remote server without me being aware of it. Is ...
2
votes
1answer
121 views

What has to occur for a hacker to monitor traffic from my LAN?

I understand that if you change your network card from managed mode to monitor mode you will be able to monitor and sniff the traffic of your local network plus all the access points around you. My ...
1
vote
0answers
64 views

Device location in LTE/GSM packets? [closed]

I'd like to know if any of the LTE or GSM packets have the GPS coordinates of a given device or any information about its geolocation. I mean, there must be a way to locate devices (maybe ...
0
votes
1answer
294 views

How can I decrypt traffic on a WPA encrypted network?

I am connected to a WPA/WPA2 Access Point and I want to sniff all wireless traffic inside that network. How can I decrypt the traffic even though I don't have the pre-shared key?
1
vote
0answers
338 views

Sniffing Tool Using Monitor Mode [closed]

As I understand it (fix me if I am wrong), there are two main ways of sniffing traffic from my wifi. I can use ARP Spoofing, to poison a device on my network then capture all of its communication. I ...
0
votes
1answer
481 views

Passive WiFi sniffing without associating to the AP

Suppose that I have a WiFi adapter that is in range of several APs and clients, all sharing the same channel and all using WPA2 encryption. I know all their passwords. I'd like to sniff on all of them ...
1
vote
2answers
382 views

Is there a way to tell, when looking at a packet, that an aircrack-ng attack happened?

I'm trying to understand how to find these attacks when using a packet sniffer (specifically using Omnipeek). Is there a way to look at a packet and know that this type attack happened? I want to find ...
1
vote
1answer
192 views

How is this iphone VPN app working?

I am using an iphone app called tunnelbear. I was wondering if my ISP gets to see my network traffic (aka the URLs I am visiting) when I am using the VPN. I did a small experiment using Paros ...
2
votes
2answers
3k views

Is it possible to sniff MAC addresses from a client that is not connected to an AP?

A similar question was answered here for sniffing MAC addresses from clients connected to 802.11 wireless access points. My question is, is it possible to sniff MAC addresses from clients which are ...
1
vote
2answers
5k views

Airodump-ng occationally not showing networks near me

I'm brand new to the field of pen testing, so please excuse my ignorance and the potential asking of a question that already exists. As I stated in the title, there are times when I run airodump-ng [...
0
votes
1answer
957 views

What are the core differences between Airodump-ng, Wireshark, and TCPdump? [closed]

As all three tools are packet sniffers, I would have expected them to give me the same results when I use them to monitor my home's network, but they don't. Therefore what are the core differences and ...
4
votes
1answer
1k views

Where would I place a sniffer to capture data in a home network with the following topology?

I am aware of the various techniques that there are to sniff around a network that has Hubs or Switches (port mirroring, hubbing out, use of taps), but I am not sure which method would be more ...
0
votes
1answer
248 views

IPv6 Blocking my Connection to the Internet [closed]

I am having problems with somebody who has either hacked or is trying to hack into my computer. To connect to the internet I tethered my phone to either my desktop or laptop, but internet ...
1
vote
1answer
918 views

How do I capture Wifi traffic in the wifi channel spectrum?

How could I capture traffic from every AP near me? For example using tcpdump or tshark and a channel hopping script(Channel 1-11). Is this possible? I have tried with tcpdump and a channel hopping ...
1
vote
0answers
145 views

DNS Leak Detection

While checking my personal VPN server for DNS leaks (and finding them), it got me thinking. If I'm a network owner who hosts a website, and I sniff and log all in/outbound on my web servers, is there ...
2
votes
2answers
5k views

Is there any way capture HTTPS Request with Python?

I created a simple python script to capture HTTP request. I captured HTTP Requests with my python script. But I can't capture HTTPS requests. I just want to capture information about URLs. I used ...
1
vote
0answers
258 views

Displaying a report of top visited websites per period (HTTP and HTTPS) [closed]

I have a MikroTik router that connects to a network with multiple endpoints. All the WAN traffic flows through this router and I would like to be able to monitor (not necessarily filter) the ...
0
votes
1answer
631 views

Sniffing the whole traffic within a network range

How is it possible to sniff the whole traffic within a network range even if it's beyond your subnet scope? For instance, consider your machine having the IP address of 172.16.96.25, but you need to ...
1
vote
2answers
534 views

Sniffing the data around me

Scenario: no router, just a laptop network card turned in monitor mode. (imagine you are in the bus or train) In this scenario can I see all the data that is going through air around me? Can I ...
2
votes
0answers
319 views

What are your favorite BLE (Bluetooth Low Energy) sniffing tools? (Hardware and Software) [closed]

I will soon need to debug BLE communication for a newly developed BLE device. What are your favorite BLE (Bluetooth Low Energy) sniffing tools? (Hardware and Software)
0
votes
1answer
472 views

Wireless - why can't i view ARP broadcasts in monitor mode on encrypted networks?

I'm running a packet capture on my test client (running in managed mode) and also on my attacking machine (running in monitor mode). It is my understanding that 802.11 networks using WEP encryption ...
1
vote
2answers
1k views

Can you sniff packets from a router using wireshark?

If you have a NIC that supports promiscuous mode is this possible? To my knowledge, I read that a switch uses a broadcast domain to broadcast packets, but if a router does not use this, is it still ...
0
votes
1answer
543 views

How to sniff ECDH HTTPS traffic?

Our company currently sniffs encrypted RSA traffic using a network tap. Would this still be possible using ECDH? I guess not. Are there commercial alternatives, like placing an agent on the ...
0
votes
1answer
58 views

User authentication protected against all attack vectors

Having spent a lot of time researching, I am unable to confirm whether my system is secure enough. Users have a mobile phone and login to a central authorization server by passing their username, ...
0
votes
4answers
6k views

How do hackers intercept messages? [closed]

It is often said that the main reason of using encryption is to unable middlemen (listeners) to understand the messages exchanged between parties even if they intercept it. But it is overlooked to ...
0
votes
1answer
618 views

Proxy to remove TLS

I tried to sniff HTTP connections via Fiddler, which acts as a HTTP proxy. But the site is redirecting http requests to https. Is there a way to prevent this, either with fiddler or with any other ...
2
votes
1answer
1k views

Which cipher suites are proposed by client and which one chosen by server?

I've sniffed several TLS/SSL communication with Wireshark, and I want to find out which cipher suites are proposed by client and which one chosen by server. How do I do that? Here you have some of ...
1
vote
0answers
802 views

Decrypting a TLS/SSL traffic with Wireshark

I am trying to decrypt a TOLS/SSL traffic with Wireshark. When I start the sniffer I do get some packets with TLSv1.2 protocols but I can't decrypt them. Have seen this post, but the tutorial provided ...
2
votes
1answer
1k views

Sniffing TLS/SSL communication with Wireshark, possible? [duplicate]

I am trying to snif a SSL/TLS communication and thought about doing it with Wireshark. I've tried to do it and sniffed some with TLSv1.2 protocols, is that the communication? If so, how do I identify ...
2
votes
3answers
960 views

Sniff Android and IOS app traffic for privacy audit

I am trying to figure out a way to sniff Http and Https traffic from app, to see who the app is sharing data with, and what data the app is sharing. The information should be used to audit whether the ...
1
vote
2answers
2k views

Iterate through and decode Dot11Elt layers — Scapy

OBJECTIVE I want to iterate through the Dot11Elt layers of a beacon frame that I captured with Scapy. I also want to decode the .info of each ID layer. def packet_handler(packet) : if packet....
4
votes
1answer
3k views

Sending Probe Request Frames | Receving Probe Response — Scapy

OBJECTIVE Send probe request frame subtype=4 and receive probe response subtype=5 with Scapy Ultimate goal is to detect access points nearby via Scapy ( not by sniffing beacon frames ) The object ...
2
votes
2answers
280 views

Relaxed access to tcpdump

I'm looking to do some packet sniffing on a computer that I do not have privileged access on. I am considering asking the admins to allow users in a specific group access to tcpdump. Specifically, I ...
3
votes
1answer
5k views

Can a .DER be converted to a .PFX / .P12 ?

Burp-Suite's http://burp/cert:8080 web-interface for downloading the CA Certificate only provides a .der encoded certificate, but for a particular use-case scenario I require a PKCS#12 .pfx/.p12. I ...
2
votes
1answer
737 views

Blind SQL Injection using OOB DNS Practical Sniffing Help

I was looking at Excellent Article from Defcon 15's which was Data retrieval over DNS during SQL Injection Attacks. (https://www.youtube.com/watch?v=iQDw0hK_eFw). In this the speaker demonstrated the ...
3
votes
3answers
27k views

How can I extract the certificate from this pcap file?

I have a pcap file of 14 sniffed SSL packets. I uploaded it here: ssl.pcap I opened it with wireshark. I see the 14 packets. The largest of seems to contain a self signed certificate (as it is made ...
0
votes
1answer
107 views

Unsecure FTP with Encrypted file and Wireshark leakage

Hi i was wandering if it is possible to have a password leaked to an encrypted file on an anon ftp server with r-x-w permissions. So for example i have a file encrypted using gpg and when opened on ...
2
votes
2answers
2k views

How to protect against request intercepting and parameter-tampering? [duplicate]

My problem is that I made an app and I am making PHP Requests. I just realized that you can sniff everything on Android with "Packet Capture". How can I make my app more secure? I thought about ...
0
votes
1answer
324 views

Encrypted traffic analysis

If i tunnel any tcp traffic true ssh or any ssl encrypted protocol will some one capturing the traffic capable of do some kind of offline decrypting using the capture file ?? What technic they use to ...
24
votes
3answers
6k views

How to deal with WPE users

I own a chat room and some users use a program Winsock Packet Editor, "WPE PRO". With it they manage to bypass chat rules, like they can't be muted or kicked, and they can send messages fast ...