Questions tagged [sniffing]
A sniffer is a program that monitors and analyzes network traffic.
151
questions
0
votes
0answers
11 views
Can attackers see which IPs a server is connected to? [duplicate]
can an attacker know without being in my area which clients my server is handling?
How do I protect against others remotely sniffing my servers network?
0
votes
1answer
78 views
Remote working. Is my employer able to monitor my activity
Due to situation, my employer made a work-from-home policy.
And remote administration tool is not installed, since I did clean installation of the system.
Is my employer able to see my activity?
...
0
votes
0answers
46 views
HackRF 2.4Ghz capture
I've been learning how to use HackRF-One recently. I'm ultimately interested in eavesdropping and decoding a brand of headsets that use frequency hopping spread spectrum in a range of 2400-2485 Mhz.
...
0
votes
1answer
68 views
Using an active or passive scan, can I detect all devices connected to or transmitting via a Wifi network?
I know that it's possible to do a passive scan on all channels to see if an access point sends a beacon. However, is it also possible to listen to general Wifi traffic on that channel and assemble a ...
0
votes
0answers
36 views
ARP spoofing, no connection on target device
since a few days i'm interested in sniffing/spoofing. I'm running Kali as a Host and MITMf (0.9.8).
My command ist:
python mitmf.py --arp --spoof --gateway X.X.X.1 --target X.X.X.2 -i wlan0
...
0
votes
0answers
46 views
Preventing packet sniffing and ARP-spoofing with a switch
Can I prevent packet sniffing and man in the middle attacks (ARP-spoofing) by connecting a switch to my end of a network, forcing certain gateway MAC address on a switch, and connecting my computer(s) ...
1
vote
2answers
73 views
Is there any point of arp spoofing on a wifi network?
I know that arp spoofing is required on a LAN network due to the fact that data is sent directly to a destination, but what about for a WLAN network? All packets can be seen if you are in promiscuous ...
-1
votes
2answers
63 views
Can Wireshark resolve https domain name?
Can I use Wireshark to see what websites are visited on my network? I'm just looking for the domain name, and not a full url or any credentials. Would I need any additional tools such as sslstrip to ...
5
votes
3answers
265 views
What are the advantages and disadvantages of using a HackRF One compared to specific protocol sniffers?
I am performing some research on IoT test tools and came across the HackRF One which can transmit and receive from 1 MHz to 6 GHz. I therefore think that it can analyze many protocols, but I cannot ...
0
votes
0answers
19 views
Sniffing Traffic Android App [duplicate]
So, imagine that a vulnerable app provides a login interface. This login sends the user's credentials to the App's server to authenticate the user. However this is done via HTTP, therefore not secure. ...
0
votes
1answer
309 views
How to sniff direct websocket connection in android ( i.e. no HTTP Upgrade connections ) using BURP?
I've pentested a lot of websites and a few apps too but this app eludes them all.
On the websites, when there's a websocket upgrade the BURP proxy recognizes it and starts showing it in the websockets ...
1
vote
0answers
52 views
Packets shown are mostly 802.11 despite open network
I'm currently trying to see if it's possible to sniff MQTT packets between two raspberry pi's from a wireless adapter in monitor mode attached to my PC.
I ran the following command on my PC (Kali ...
4
votes
0answers
74 views
Is there a reason why ARP spoofing would be used for spying instead of sniffing promiscuously?
I am a student trying to demonstrate an ARP spoofing attack. To test whether my attack was working I decided to use wireshark to sniff the packets on the attacking machine. At first I thought I was ...
10
votes
3answers
633 views
Can network traffic between Docker containers be sniffed?
On normal networks, it is a security risk to send plaintext data, since attackers can sniff or even manipulate all traffic. Encryption is required for secure communication. When using Docker ...
2
votes
1answer
102 views
Is eavesdropping possible over smpp?
I don't know much about the SMPP protocol, but I often hear that it is not a secure protocol.
If Alice sends a SMS to Bob, can Eve view what Alice sent to him? If yes, can you give an example on how ...
-2
votes
1answer
49 views
Monitor data traffic in chrome:// protocols
With Burp Suite we can capture the traffic of protocols like http, https. But i want now monitor the data traffic in urls like chrome://settings
0
votes
0answers
113 views
How to find sniff communication to smart card reader?
I use a smart card reader and I want to know if the reader is secure. How to sniff communication between card and card reader?
0
votes
1answer
194 views
ip_forward reverting back to 0 during ettercap subnet scanning [closed]
Im trying to arp spoof a local network but the /proc/sys/net/ipv4/ip_forward is reverting back to 0 when ettercap is performing subnet scan on a network hub. Even if i change it back to 1 after the ...
0
votes
0answers
410 views
Intercept TCP traffic using Python
Situation: I am trying to intercept TCP (not HTTP) traffic on a Windows machine using Python. I am posting this question as most answers I was able to find teaches how to sniff traffic.
Normal ...
0
votes
0answers
26 views
monitoring VOIP packets with GV configured with obi200
I have a question regarding the security level of using Google voice with OBI200. I believe they probably using XMPP protocol which provides no encryption. In a large scale can the VOIP packets be ...
0
votes
0answers
55 views
How does an open network without a password expose other connections? [duplicate]
I read here, but that wasn't related.
If userA is connected to router and userB is connected to the same router, then how can userB sniff communications between userA and the router?
I've see a ...
1
vote
0answers
95 views
Bluetooth security [closed]
How secure is it to use Bluetooth handsfree?
Can't someone eavesdrop the signals and listen to the conversation?
Does encryption in Bluetooth secure the information?
Can I use anyother tool ...
0
votes
2answers
464 views
Capture wireless traffic in PROMISCUOUS mode (not monitor mode)
I am trying to capture packets from other devices that are connected to the same network as I am. I know the difference between monitor mode and promiscuous mode (explained in this question), but for ...
0
votes
1answer
35 views
Is it possible to infer advanced cookie properties like expiration from Wireshark
I want to perform a cookie injection attack for demonstration purposes.
I could achieve this using Firefox Cookie-Editor extension. However, the attack can only succeed if I enter the cookie name, ...
1
vote
0answers
38 views
PEAP MS-CHAPv2 brute force attack
I have a 802.1x switch and a client authenticated using PEAP-MS-CHAPv2.
I sniffed the traffic using a HUB between the client and the switch.
How can I use the captured informations to perform a brute-...
0
votes
0answers
44 views
What is wrong with this ettercap dump file?
I am trying to read a dump file which is created with ettercap. But when I am trying to read it with ettercap it is saying:
Error while capturing: bogus savefile header
And I can't read the file with ...
2
votes
0answers
130 views
Sniffing TCP packets using Wireshark
I am trying to reverse engineer a decoder. To do so I need to sniff the packets that the decoder receives from an Android application installed on my phone, this application is what controls the ...
1
vote
1answer
67 views
Is it possible that a Peer AS over BGP can sniff other AS traffic?
Is it possible that one AS can sniff another peer's traffic?
0
votes
1answer
540 views
Wireshark - How to see the domain of HTTPS websites visited
How can I see the domain name of https websites that are visited on my network? I know I'm not able to see the full url, just the websites ip or domain. I think it my be possible with a reverse dns ...
0
votes
1answer
151 views
Need Explaination to Xerosploit's Sniffer Function code
I'm looking at the sourcecode of Xerosploit, and there is a piece of code I don't understand:
cmd_snif = os.system("xettercap " + target_parse + target_ips + "
-P MYSQL, SNPP, DHCP, WHATSAPP, ...
1
vote
1answer
993 views
How to sniff bluetooth traffic to Android app?
Please bare with me with this introduction to the problem. Unfortunately title might be confusing, but it's hard to came up with proper one - let me show you why.
I'm trying to decode WM-Bus (Smart ...
2
votes
2answers
98 views
Is using a network sniffer for host discovery a viable option?
Would a packet sniffer like tcpdump be effective for network host discovery and if so how effective is it compared to more active methods such as the infamous network mapper nmap?
2
votes
1answer
150 views
Can we use network hub as an MITM sniffing device?
My intention is to analyze all network traffic which is coming to and originating from a network connected device I have. From the configurations of the device I am able to proxy all the HTTP traffic ...
0
votes
0answers
449 views
What are the dangers of using 3g/4g in smartphones?
Since we should always avoid public networks, is there some sort of attack that intercept my online activity or steal passwords when I'm using 3g/4g? If exists, how I can protect myself from this type ...
3
votes
2answers
589 views
Does someone need to be connected to my network to sniff HTTP requests?
TL;DR Would a potential attacker need to have my Wi-Fi password and be connected to my network in order to read HTTP requests?
Over the past year or so, I have made a few DIY home automation projects....
0
votes
1answer
188 views
is it possible to create a WEP wifi that accepts any password?
the same as evil twin fluxion but without captive portal so the victim connects to our fake Wep Wifi that accepts any password after getting disconnected from his Wpa 2 Wifi so we sniff data from the ...
0
votes
0answers
95 views
IPSec Sniff Traffic
I'm wondering if it is possible to Sniff IPSec connections.
At the beginning of a connection, the two peers agree on a SA and exchange a PSK or Certificates.
What I'm thinking about, is to ...
0
votes
0answers
430 views
How to capture non-HTTP or HTTPS URLs in Burp
I want to intercept URLs except for HTTP and HTTPS, is that possible with Burp Suite?
For example, I want to get a response of following URL in Burp Suite:
jar:file:///C:/Program%20Files/Mozilla%...
0
votes
1answer
114 views
How can I see the data content (HTML, JS, etc) in HTTPS responses in Wireshark?
I'm learning packet sniffing and analysis with Wireshark.
At first, I could only see DNS, TCP, and ARP packets. I learned I couldn't see any HTTP packets because it was all encrypted in the transport ...
0
votes
1answer
1k views
Analyze / Sniff all packets from all devices connected to a router
First of all, before explaining what I'm trying to do, let me clarify that my intentions are not steal any information, as it's only for study purposes, not even for my own entertainment.
I'm trying ...
1
vote
3answers
527 views
How can I capture all data from a specific device on my network?
I have an iPhone that is connected to my Wi-Fi at home. I want to capture ALL traffic from that iPhone (because it's my network) and record it and view it. I don't have physical access to the device.
...
0
votes
1answer
147 views
How to protect your wifi traffic from sniffing if untrusted people know the password?
WPA2 PSK is used to encrypt packets to and from a router. All the members on the network have the wifi password, so theoritically if one of them is untrustable they could be able to capture and ...
0
votes
2answers
1k views
How to eavesdrop and decrypt the HTTPs communication of an IoT device?
I am trying to setup a MitM scenario between an IoT device and WAN. It is possible and quite easy to achieve same thing for the application run on a mobile device by setting my proxy server(Fiddler)'s ...
2
votes
2answers
86 views
My AP is probing other device?
I just installed kismet 2018 Beta update on my kali and test run it on my host but i came across something that i dont understand and i would appreciate if someone would explain to me.
When i check ...
1
vote
0answers
458 views
Bettercap/ettercap unable to detect HTTP packets
Basically, I am trying to sniff the network traffic from my other computer. So here's the situation:
I am in a network, where:
192.168.1.1 - default gateway
192.168.1.24 - "victim" (my other ...
0
votes
1answer
601 views
Use bettercap to sniff traffic going through a proxy configured in the browser?
Using bettercap, how can I intercept traffic which goes to a proxy server which is configured in browser?
With no proxy configured it is working fine. But as soon as a proxy is set in the browser ...
12
votes
4answers
5k views
Eavesdropping vs. sniffing
I'm taking a coursera course, and they take pains when talking about network security to distinguish between eavesdropping and sniffing.
According to their definitions, sniffing involves reading or ...
1
vote
2answers
2k views
How can I sniff Telegram packets before they get encrypted?
How can I sniff packets that are being sent from my computer to their server and from their servers to me using a sniffing app like Wireshark?
Right now when I use Wireshark, they are all encrypted, ...
23
votes
2answers
4k views
Is telnet secure through SSH tunneling
Firstly sorry, maybe dumb question, but I have one service running on my server which can be operated only by telnet (port 23), but I know that telnet is insecure, so I blocked port 23 in iptables ...
0
votes
1answer
47 views
Tor website as proxy like receiving server
I want to create a anonymous application that will send data all the time to my server. I don't want my ip to be exposed so I wanted to use Tor. I wanted to send sniffed packets to this server and ...
