Questions tagged [sniffer]
A sniffer is a program that monitors and analyzes network traffic, detecting bottlenecks and problems.
220
questions
0
votes
0
answers
29
views
How can i find out if someone is using a sniffer on my network [duplicate]
If I suspect someone is using a sniffer to gain access to my info how can I find out? Is it possible?
I need someone to explain this to me like im 5 because I know nothing about this stuff
1
vote
2
answers
149
views
How to sniff connection between web browser and 127.0.0.1:1234 running HTTP proxy on Client B's machine while taking internet from client A's machine?
Client A is connected to the public internet.
Client B gateway address is connected to the Client A's network interface.
Client B is running a Web browser which is sending requests to 127.0.0.1:1234 ...
- 111
4
votes
1
answer
235
views
Can your ISP pull off a man-in-the-middle attack over unencrypted DNS?
Today I was visiting a website, using HTTPS obviously, that firefox gave me a certificate error and said that the certificate did not match the website's information.
After a bit of investigation, it ...
- 63
0
votes
0
answers
379
views
Fiddler with Android Emulator mostly shows "A SSLv3-compatible ClientHello handshake was found" with no headers or data
When I run fiddler with a proxy for the BlueStacks Android emulator (on Windows), many of the results are listed as "Tunnel to" a random IP address, with no headers and no information on the ...
- 1
1
vote
2
answers
786
views
Is an Ethernet FTP server on a local network safe if an attacker can't access the router?
I'm having trouble understanding certain security concepts and I was wondering if someone could help me out with some questions.
Imagine this setup:
A home router with a very strong password, that ...
- 13
5
votes
1
answer
2k
views
Is packet sniffing or other manipulation possible at a DSL or cable wire between my modem and the ISP?
Can a DSL or cable wire between my modem and the ISP be manipulated in any way at the hardware level to sniff the traffic data?
For example by neighbours with physical access to the wires in a big ...
- 61
15
votes
3
answers
4k
views
Can an HTTPS request be sent twice?
When sniffing network traffic, one can see an HTTPS packet and all its (encrypted) data.
I am wondering what would happen if this packet is copied and then re-sent.
Is there a protocol at some layer ...
- 161
2
votes
1
answer
197
views
Processing Exceptionally High Volume Singular Flows
I wanted to know if anyone had experience sensoring single flows that generate 90 kpps or upward of traffic. My conundrum is that I use tools which I would like to be able to properly see an entire ...
- 123
0
votes
1
answer
1k
views
At times bettercap ARP sniffing works great and at times not at all, what would be the reason?
I like to track the websites my daughter goes to in order to have some control. So I installed bettercap and setup a script to start it to sniff the HTML URLs being accessed (well, the reverse URL ...
- 987
0
votes
1
answer
110
views
How To Validate Secure Traffic from Chrome with Element To Matrix.org on Linux
Are you familiar with the Element chat system of https://app.element.io ? Are you familiar with its connections to Matrix.org (for a free account)? Is there a way that I can sniff this traffic on the ...
- 295
1
vote
0
answers
210
views
How do I prevent against man-in-the-middle, specifically the packet injection attack? [closed]
I suspect that I am being targeted in a man-in-the-middle attack from the ISP or in-between of the fiber cable transit or the node by sniffer hardware that detects and injects the malicious packets.
I ...
- 111
2
votes
2
answers
240
views
Detect and optionally block a certain string in network traffic on Windows 10
Suppose I have some important text data on my computer, like a plain text password y5278dhk28ds and I have malware on my PC that periodically searches for sensitive data and sends that data to ...
- 121
1
vote
1
answer
133
views
how to prevent multicast packets from being snooped
As we know, any user can send IGMP to join a multicast group, which means an unauthirized user can capture any multicast packets in a traditional LAN.
I want to prevent the multicast packets from ...
- 11
2
votes
1
answer
1k
views
Can my work computer sniff my home network? [duplicate]
Can my work computer sniff the websites that my parents personal computer go through? I know this would be very unethical for the company to do so but I never realized this is POTENTIALLY possible ...
- 21
1
vote
0
answers
415
views
Sniff the traffic of sim card [closed]
I wonder if Sim Card traffic can be sniffed? I mean only the internet connection when it makes to requests to several websites. Sniff those traffic by WireShark maybe?
P.S: not messages, only network ...
0
votes
1
answer
154
views
Is it possible to infer advanced cookie properties like expiration from Wireshark
I want to perform a cookie injection attack for demonstration purposes.
I could achieve this using Firefox Cookie-Editor extension. However, the attack can only succeed if I enter the cookie name, ...
- 3
0
votes
1
answer
1k
views
Router administration page is served over HTTP
My wireless router admin page does not include https option.
It is always served over http. This is obviously a concern in case someone is sniffing the network and can read my password in plain text.
...
- 105
7
votes
1
answer
3k
views
Is my router spying on my network traffic?
I got a new TP-Link router a couple months ago, and configured it to use the OpenDNS domain servers for basic content filtering across all household WiFi devices. Everything seemed to be great.
...
- 211
2
votes
0
answers
104
views
I have a water heater with a wireless transmitter for changing the temp, how can I sniff the commands sent between them? [closed]
Long story short I'm automating a lot of my stuff at home and as part of that I'd like to be able to replicate the commands sent to my unit (https://www.rinnai.com.au/wp-content/uploads/2017/09/...
- 21
0
votes
1
answer
397
views
Need Explaination to Xerosploit's Sniffer Function code
I'm looking at the sourcecode of Xerosploit, and there is a piece of code I don't understand:
cmd_snif = os.system("xettercap " + target_parse + target_ips + "
-P MYSQL, SNPP, DHCP, WHATSAPP, ...
2
votes
2
answers
177
views
Is using a network sniffer for host discovery a viable option?
Would a packet sniffer like tcpdump be effective for network host discovery and if so how effective is it compared to more active methods such as the infamous network mapper nmap?
- 23
2
votes
0
answers
238
views
How to identify the communication protocol used in a wireless device?
I really hope that this is the right place to ask.
I need to analyze a baby monitor for any security or privacy weaknesses.
The spec sheet of the baby monitor says, that it uses the ISM 2400~2483.5 ...
- 21
2
votes
1
answer
290
views
How to go from wifi password to computer access
In looking at What can hackers do with a wifi password?, it is said:
Simply said, if someone has your Wifi password, they have full access to all connected computers and devices within your network....
- 608
1
vote
3
answers
2k
views
How can I capture all data from a specific device on my network?
I have an iPhone that is connected to my Wi-Fi at home. I want to capture ALL traffic from that iPhone (because it's my network) and record it and view it. I don't have physical access to the device.
...
- 121
4
votes
2
answers
9k
views
How to intercept http/https requests done by an Android app in plain text? [duplicate]
When I give an android app internet permission and read access to my files, malicious software can send my personal data (pictures and video) to a remote server without me being aware of it.
Is ...
- 185
2
votes
1
answer
236
views
What has to occur for a hacker to monitor traffic from my LAN?
I understand that if you change your network card from managed mode to monitor mode you will be able to monitor and sniff the traffic of your local network plus all the access points around you. My ...
- 21
1
vote
0
answers
122
views
Device location in LTE/GSM packets? [closed]
I'd like to know if any of the LTE or GSM packets have the GPS coordinates of a given device or any information about its geolocation. I mean, there must be a way to locate devices (maybe ...
- 111
0
votes
1
answer
744
views
How can I decrypt traffic on a WPA encrypted network?
I am connected to a WPA/WPA2 Access Point and I want to sniff all wireless traffic inside that network. How can I decrypt the traffic even though I don't have the pre-shared key?
- 3
1
vote
0
answers
471
views
Sniffing Tool Using Monitor Mode [closed]
As I understand it (fix me if I am wrong), there are two main ways of sniffing traffic from my wifi.
I can use ARP Spoofing, to poison a device on my network then capture all of its communication.
I ...
- 111
1
vote
1
answer
917
views
Passive WiFi sniffing without associating to the AP
Suppose that I have a WiFi adapter that is in range of several APs and clients, all sharing the same channel and all using WPA2 encryption. I know all their passwords. I'd like to sniff on all of them ...
- 127
1
vote
2
answers
893
views
Is there a way to tell, when looking at a packet, that an aircrack-ng attack happened?
I'm trying to understand how to find these attacks when using a packet sniffer (specifically using Omnipeek). Is there a way to look at a packet and know that this type attack happened? I want to find ...
- 11
1
vote
1
answer
245
views
How is this iphone VPN app working?
I am using an iphone app called tunnelbear. I was wondering if my ISP gets to see my network traffic (aka the URLs I am visiting) when I am using the VPN.
I did a small experiment using Paros ...
- 113
2
votes
2
answers
6k
views
Is it possible to sniff MAC addresses from a client that is not connected to an AP?
A similar question was answered here for sniffing MAC addresses from clients connected to 802.11 wireless access points. My question is, is it possible to sniff MAC addresses from clients which are ...
- 123
1
vote
2
answers
39k
views
Airodump-ng occationally not showing networks near me
I'm brand new to the field of pen testing, so please excuse my ignorance and the potential asking of a question that already exists. As I stated in the title, there are times when I run airodump-ng [...
- 111
0
votes
1
answer
3k
views
What are the core differences between Airodump-ng, Wireshark, and TCPdump? [closed]
As all three tools are packet sniffers, I would have expected them to give me the same results when I use them to monitor my home's network, but they don't. Therefore what are the core differences and ...
- 649
5
votes
1
answer
2k
views
Where would I place a sniffer to capture data in a home network with the following topology?
I am aware of the various techniques that there are to sniff around a network that has Hubs or Switches (port mirroring, hubbing out, use of taps), but I am not sure which method would be more ...
- 649
0
votes
1
answer
438
views
IPv6 Blocking my Connection to the Internet [closed]
I am having problems with somebody who has either hacked or is trying to hack into my computer.
To connect to the internet I tethered my phone to either my desktop or laptop, but internet ...
- 101
1
vote
1
answer
1k
views
How do I capture Wifi traffic in the wifi channel spectrum?
How could I capture traffic from every AP near me? For example using tcpdump or tshark and a channel hopping script(Channel 1-11). Is this possible?
I have tried with tcpdump and a channel hopping ...
- 13
1
vote
0
answers
202
views
DNS Leak Detection
While checking my personal VPN server for DNS leaks (and finding them), it got me thinking. If I'm a network owner who hosts a website, and I sniff and log all in/outbound on my web servers, is there ...
- 131
2
votes
2
answers
14k
views
Is there any way capture HTTPS Request with Python?
I created a simple python script to capture HTTP request. I captured HTTP Requests with my python script.
But I can't capture HTTPS requests. I just want to capture information about URLs.
I used ...
- 151
1
vote
0
answers
402
views
Displaying a report of top visited websites per period (HTTP and HTTPS) [closed]
I have a MikroTik router that connects to a network with multiple endpoints. All the WAN traffic flows through this router and I would like to be able to monitor (not necessarily filter) the ...
0
votes
1
answer
1k
views
Sniffing the whole traffic within a network range
How is it possible to sniff the whole traffic within a network range even if it's beyond your subnet scope?
For instance, consider your machine having the IP address of 172.16.96.25, but you need to ...
- 246
1
vote
2
answers
685
views
Sniffing the data around me
Scenario:
no router, just a laptop network card turned in monitor mode.
(imagine you are in the bus or train)
In this scenario can I see all the data that is going through air around me?
Can I ...
- 113
2
votes
0
answers
385
views
What are your favorite BLE (Bluetooth Low Energy) sniffing tools? (Hardware and Software) [closed]
I will soon need to debug BLE communication for a newly developed BLE device.
What are your favorite BLE (Bluetooth Low Energy) sniffing tools? (Hardware and Software)
- 581
0
votes
1
answer
937
views
Wireless - why can't i view ARP broadcasts in monitor mode on encrypted networks?
I'm running a packet capture on my test client (running in managed mode) and also on my attacking machine (running in monitor mode).
It is my understanding that 802.11 networks using WEP encryption ...
- 3
1
vote
2
answers
2k
views
Can you sniff packets from a router using wireshark?
If you have a NIC that supports promiscuous mode is this possible? To my knowledge, I read that a switch uses a broadcast domain to broadcast packets, but if a router does not use this, is it still ...
- 51
0
votes
1
answer
814
views
How to sniff ECDH HTTPS traffic?
Our company currently sniffs encrypted RSA traffic using a network tap.
Would this still be possible using ECDH? I guess not.
Are there commercial alternatives, like placing an agent on the ...
- 1
0
votes
1
answer
128
views
User authentication protected against all attack vectors
Having spent a lot of time researching, I am unable to confirm whether my system is secure enough.
Users have a mobile phone and login to a central authorization server by passing their username, ...
- 101
0
votes
4
answers
11k
views
How do hackers intercept messages? [closed]
It is often said that the main reason of using encryption is to unable middlemen (listeners) to understand the messages exchanged between parties even if they intercept it. But it is overlooked to ...
- 185
0
votes
1
answer
1k
views
Proxy to remove TLS
I tried to sniff HTTP connections via Fiddler, which acts as a HTTP proxy. But the site is redirecting http requests to https. Is there a way to prevent this, either with fiddler or with any other ...
- 1,761