Questions tagged [sniffer]

A sniffer is a program that monitors and analyzes network traffic, detecting bottlenecks and problems.

Filter by
Sorted by
Tagged with
193
votes
7answers
188k views

Does https prevent man in the middle attacks by proxy server?

There is a desktop client A connecting to website W in a https connection A --> W Somehow between A and W, there is a proxy G. A --> G --> W In this case, will G be able to get the ...
70
votes
12answers
133k views

Can I prevent my neighbors, whom I pay for shared internet (WiFi), from seeing the sites I've visited?

I pay my neighbors to use their WiFi. They have listed me as Guest with a separate password from theirs. Is there any way to prevent them from seeing the sites I've visited? My browser history clears ...
43
votes
6answers
45k views

What is preventing us from sniffing the mobile phone communication?

I'm learning wireless penetration testing. It really is amazing. But it made me wonder, what about mobile phones? They are also means of wireless communication. So, our entire voice must be in the air ...
39
votes
2answers
45k views

What is the difference between Promiscuous and Monitor Mode in Wireless Networks?

In Wireless Networks, you can put your wireless card in Promiscuous or in Monitor Mode. What is the difference between these two modes ?
31
votes
2answers
6k views

Can a connected USB device read all data from the USB bus?

Is it possible for a (malicious) (hardware) USB device to access all the data that is transferred through the USB bus and then read/store this information, essentially sniffing all transferred data? ...
28
votes
3answers
94k views

Can a hacker sniff others' network data over a wireless connection?

Provided that the hacker knows the WiFi password if any (WEP or WPA), is he capable of sniffing network data of other hosts connected to the same access point?
24
votes
3answers
7k views

How to deal with WPE users

I own a chat room and some users use a program Winsock Packet Editor, "WPE PRO". With it they manage to bypass chat rules, like they can't be muted or kicked, and they can send messages fast ...
24
votes
6answers
26k views

Possibility to sniff HTTPS traffic on devices without installing a certificate

My goal is to sniff the HTTPS traffic of some digital devices (AppleTV, game consoles, etc.), and decrypt the HTTPS packets in my local network. I cannot figure out a way by using some HTTPS ...
20
votes
4answers
11k views

Can an attacker sniff Mac addresses on a wifi?

If an attacker turns on wifi but doesn't have the security key to connect to an access point in range, can he still sniff packets that travel between the access point and clients connected to the ...
19
votes
4answers
4k views

sniffed packets , is there a way to put together the file?

I would like to know, in case an attacker manged to capture some packets from my network traffic, can he build from them a file or any easy to understand thing? I know that the TCP/IP protocol is ...
18
votes
3answers
63k views

How can I detect if someone is sniffing network packets on the LAN?

I would like to know if there is a product or software that can detect if there is a sniffer currently on the network? In other words is it possible at all to detect if there is a network card on ...
15
votes
2answers
906 views

What else can be sniffed?

I'm a pentest newbie. Recently I've learned about sniffing in LANs. From the books and internet resources I'm studying, the sniffing (or packet capture) is always done on either Wired LANs (Ethernet ...
15
votes
3answers
9k views

How does FaceNiff work?

FaceNiff is an Android app that sniffs Facebook session ids. You must be connected to the same WiFi as the victim. It is said to be working even when WPA2 is present. How is it possible? I can decrypt ...
15
votes
3answers
9k views

Smartphone / GSM Sniffer

This question would be in the category of SmartPhone Sniffers. So we have sniffers that can show the packets that are being sent across a wired or wireless (802.11) network. I am just performing a ...
14
votes
4answers
28k views

Security measures against packet sniffing

I work in a environment where packet sniffing can be easily done . I was worried about my confidential data . Please suggest how is it done and precaution which i can take at client level.
13
votes
2answers
95k views

Sniffing, Snooping, Spoofing

Could somebody please explain to me the differences between the following attacks? sniffing snooping spoofing My professors used them all in his documents, but I'm not sure, if those are 3 ...
13
votes
1answer
14k views

Mobile numbers capture and transmit data

will it be possible to build a low cost hardware/software device which can capture mobile numbers within a specified radius and then use that information to transmit an sms to those numbers? From what ...
12
votes
2answers
8k views

Obtain credentials by spoofing WPA/WPA2 Enterprise network?

I have a large scale wireless network secured using WPA/WPA2 Enterprise authentication. Recently, I was made aware of the possibility that someone may use a dd-wrt router and a computer to spoof the ...
10
votes
2answers
1k views

When are HTTP session cookies at risk over Wi-Fi?

If I'm using websites that do not use HTTPS, but I'm on a WEP-protected Wi-Fi network, are my cookies safe from being sniffed by third-parties? Are cookies only at risk during login, or am I at risk ...
10
votes
3answers
10k views

promiscuous vs monitor mode in 802.11

I've been reading up on promiscuous mode and monitor mode as they relate to 802.11 networks. I understand the difference, which is explained here: What is the difference between Promiscuous and ...
10
votes
4answers
140k views

How to know what others browse through the network?

My friend connected to WIFI and after 5 minutes he told me which sites I had actually been browsing, and who I chat with. My question is: how do I defend myself against this, and also how did he do ...
9
votes
4answers
5k views

How to check if wifi is safe while travelling?

I'm quite a bit of a traveller. So i tend to just stay with my smartphone and sometimes notebook. I'm not a security expert but i would like to check how to know if wifi is safe to use. For example, ...
9
votes
4answers
7k views

extract from pcap all protocols found

I have some pcap files, and i would like just to get a list of protocols that are present on that pcap file. I would like it in a batch mode, not using wireshark I think tshark is able to do it, but ...
9
votes
4answers
47k views

Is there a way to sniff packets of a remote IP address?

I would like to know if sniffing packets of a remote IP address is possible at all, if yes I would like to know: what is the success rate, I mean how much percent of the packets you would capture? ...
9
votes
2answers
17k views

sniffing/recording GSM 3G signals

Is it possible to sniff or record and process GSM 3G signals (from some reciever) given that there is no other signals interrupting etc (the most comfortable conditions) Update (with some supporting ...
7
votes
1answer
5k views

is it possible to sniff email content inside network?

I am working in a IT company. I am using LAN for all internet activities. I send some email from my personal gmail account. My network administrator sniffed all email I send from LAN and he shows the ...
7
votes
2answers
9k views

How to hack a switch connected network with static ARP?

For example, if there is a network with three computers connected to the same switch, Alice, Bob, and Eve. If Alice and Bob add each other on their own ARP list as a static ARP entry, and Eve wants to ...
7
votes
3answers
6k views

Capturing and decrypting my own SSL traffic

When I use browser or wget to access another site, some sites will only use HTTPS / SSL automatically. When a site doesn't provide content without encryption, how do I capture what my computer sends ...
7
votes
4answers
2k views

Is packet sniffing a risk on VPS? If so, what precautions should I ask my host if they take?

I'm wondering if packet sniffing is a risk on my VPS. Is it always a risk or are their precautions a host vendor can take? e.g. a switched network etc. If I wanted to ask my host what precautions ...
7
votes
1answer
5k views

Log all crypto keys used for outgoing SSL / TLS connections on Linux server

Is there some environment variable that works how SSLKEYLOGFILE works for NSS-reliant programs but which would apply to all outgoing TLS / SSL connections on a Linux server and not just ones that use ...
7
votes
1answer
3k views

Is my router spying on my network traffic?

I got a new TP-Link router a couple months ago, and configured it to use the OpenDNS domain servers for basic content filtering across all household WiFi devices. Everything seemed to be great. ...
7
votes
1answer
2k views

Cutting and sniffing fiberoptic cables - time before detection?

Suppose you'd cut a fiberoptic cable with two razor sharp mirrors, reflecting the traffic out into your sniffing device and then back into the wire again. How fast would you need to get the traffic up ...
7
votes
4answers
7k views

Is it possible to sniff traffic of a remote network? (With admin access to router)

Me and a friend of mine are simulating a widespread scenario where router configurations are untouched (default passwords) and are visible from the internet. Him, acting as the victim, will constantly ...
7
votes
1answer
1k views

How to get hold of and use WPA session keys?

I'm testing sniffing and decrypting my WPA2 wifi network traffic. But when using airdecap to decrypt the capture file (created by airodump) using my WPA passphrase I only get broadcast traffic. If I ...
7
votes
1answer
740 views

WLCTL protocol detected by sniffer in an Android tablet

I detected that my rooted Android tablet had a slow connection. Trying to find what is taking the bandwith, I installed a firewall (DroidWall) and I blocked all the applications thinking that one of ...
6
votes
4answers
2k views

How should I determine if an application transmits my credentials securely?

I need to know on what basis I can assess the trustworthiness of application usage (accessing private accounts) on public networks. As an example, I'd like to play Diablo 2 LoD while I'm at an ...
6
votes
4answers
50k views

How can I extract the certificate from this pcap file?

I have a pcap file of 14 sniffed SSL packets. I uploaded it here: ssl.pcap I opened it with wireshark. I see the 14 packets. The largest of seems to contain a self signed certificate (as it is made ...
6
votes
6answers
18k views

monitoring outgoing network traffic [closed]

The graphs for one server that I am using are showing consistent 7.5 kb/s outgoing network traffic that started a few days ago. How can I monitor/log/capture/analize this traffic to see what is it, ...
6
votes
3answers
13k views

Facebook POST request capture

I have been trying to test a sniff on facebook POST request forms using wireshark (filtered HTTP). At login form, I would try login, and then check wireshark and see that no packet was captured. ...
6
votes
2answers
1k views

Suspicious 'upstream' traffic

We are seeing unusual amounts of traffic heading upstream on our WAN connection, during the day our system can exceed (or attempt to exceed) the 1Mbps limit imposed on the connection. I have PRTG ...
6
votes
1answer
2k views

How do you analyze an unknown network protocol?

Of course Wireshark can be used to sniff traffic - you can inspect each packet or chain of packets. But how would you do it smarter? Which tools do you use to identify behaviors or to automate the ...
6
votes
3answers
23k views

How to sniff Bluetooth traffic using Android?

I have two Arduinos using Bluetooth to communicate one with another. Is it possible to sniff the Bluetooth conversation between the two devices? An Android solution would be great, I heard of hcidump ...
6
votes
2answers
1k views

Electromagnetic induction attacks - reverse TEMPEST?

I know that electromagnetic emissions from a device can be used to extract information from a system, e.g. TEMPEST or Van Eck phreaking. I also know it's possible to induce a signal into a ...
5
votes
6answers
3k views

What might be the legal and policy consequences of traffic sniffing?

I found a security hole in an organisation in the UK with many employees. Login form sends user name and password in clear text to the public facing IP via HTTP. Initially I pointed this to IT but ...
5
votes
8answers
4k views

how can you view an HTTP request in transit?

In Google Chrome, sometimes you will see the https: protocol in the URL bar with a red strike through it. Clicking on the info button says that not all elements on the page are encrypted, and may be ...
5
votes
1answer
1k views

Sniffing IMAPS traffic! Are there any tools for this?

I've got a problem where someone has implemented a custom IMAP Server. I need to write a custom application to get a list of emails, and fetch messages. Problem is, every library I've tried to use ...
5
votes
1answer
1k views

Security implications for two applications communicating with TCP/IP on localhost

Considering this for the local loopback connection: - It is implemented entirely within the operating system's networking software and passes no packets to any network interface controller. If two ...
5
votes
2answers
207 views

Malicious packet that attacks packet sniffers?

Is it possible to crash a packet sniffer through a specially-formed packet to stop website administrators from tracking down the source? If it is possible, has it been done before? Or is it just not ...
5
votes
3answers
6k views

Can an attacker sniff physical network traffic through WiFi?

So, I am wondering - is it possible for an attacker to sniff traffic on an Ethernet connection if they are not physically plugged into the modem/router hardware but they are connected through wifi? In ...
5
votes
1answer
10k views

How can I decrypt traffic on a WEP encrypted network?

Let's say that I am connected to a WEP Access Point and I want to sniff all wireless traffic inside that network. How can I decrypt the traffic even though I don't have the cryptographic key? I found ...

1
2 3 4 5