Questions tagged [sniffing]

A sniffer is a program that monitors and analyzes network traffic.

Filter by
Sorted by
Tagged with
0
votes
0answers
70 views

How to find sniff communication to smart card reader?

I use a smart card reader and I want to know if the reader is secure. How to sniff communication between card and card reader?
0
votes
1answer
37 views

ip_forward reverting back to 0 during ettercap subnet scanning [closed]

Im trying to arp spoof a local network but the /proc/sys/net/ipv4/ip_forward is reverting back to 0 when ettercap is performing subnet scan on a network hub. Even if i change it back to 1 after the ...
0
votes
0answers
103 views

Intercept TCP traffic using Python

Situation: I am trying to intercept TCP (not HTTP) traffic on a Windows machine using Python. I am posting this question as most answers I was able to find teaches how to sniff traffic. Normal ...
0
votes
0answers
26 views

monitoring VOIP packets with GV configured with obi200

I have a question regarding the security level of using Google voice with OBI200. I believe they probably using XMPP protocol which provides no encryption. In a large scale can the VOIP packets be ...
0
votes
0answers
55 views

How does an open network without a password expose other connections? [duplicate]

I read here, but that wasn't related. If userA is connected to router and userB is connected to the same router, then how can userB sniff communications between userA and the router? I've see a ...
1
vote
0answers
85 views

Bluetooth security [closed]

How secure is it to use Bluetooth handsfree? Can't someone eavesdrop the signals and listen to the conversation? Does encryption in Bluetooth secure the information? Can I use anyother tool ...
0
votes
2answers
124 views

Capture wireless traffic in PROMISCUOUS mode (not monitor mode)

I am trying to capture packets from other devices that are connected to the same network as I am. I know the difference between monitor mode and promiscuous mode (explained in this question), but for ...
0
votes
1answer
34 views

Is it possible to infer advanced cookie properties like expiration from Wireshark

I want to perform a cookie injection attack for demonstration purposes. I could achieve this using Firefox Cookie-Editor extension. However, the attack can only succeed if I enter the cookie name, ...
0
votes
0answers
28 views

PEAP MS-CHAPv2 brute force attack

I have a 802.1x switch and a client authenticated using PEAP-MS-CHAPv2. I sniffed the traffic using a HUB between the client and the switch. How can I use the captured informations to perform a brute-...
0
votes
0answers
32 views

What is wrong with this ettercap dump file?

I am trying to read a dump file which is created with ettercap. But when I am trying to read it with ettercap it is saying: Error while capturing: bogus savefile header And I can't read the file with ...
2
votes
0answers
114 views

Sniffing TCP packets using Wireshark

I am trying to reverse engineer a decoder. To do so I need to sniff the packets that the decoder receives from an Android application installed on my phone, this application is what controls the ...
1
vote
1answer
63 views

Is it possible that a Peer AS over BGP can sniff other AS traffic?

Is it possible that one AS can sniff another peer's traffic?
0
votes
1answer
131 views

Wireshark - How to see the domain of HTTPS websites visited

How can I see the domain name of https websites that are visited on my network? I know I'm not able to see the full url, just the websites ip or domain. I think it my be possible with a reverse dns ...
0
votes
1answer
111 views

Need Explaination to Xerosploit's Sniffer Function code

I'm looking at the sourcecode of Xerosploit, and there is a piece of code I don't understand: cmd_snif = os.system("xettercap " + target_parse + target_ips + " -P MYSQL, SNPP, DHCP, WHATSAPP, ...
1
vote
1answer
453 views

How to sniff bluetooth traffic to Android app?

Please bare with me with this introduction to the problem. Unfortunately title might be confusing, but it's hard to came up with proper one - let me show you why. I'm trying to decode WM-Bus (Smart ...
2
votes
2answers
92 views

Is using a network sniffer for host discovery a viable option?

Would a packet sniffer like tcpdump be effective for network host discovery and if so how effective is it compared to more active methods such as the infamous network mapper nmap?
2
votes
1answer
73 views

Can we use network hub as an MITM sniffing device?

My intention is to analyze all network traffic which is coming to and originating from a network connected device I have. From the configurations of the device I am able to proxy all the HTTP traffic ...
0
votes
0answers
385 views

What are the dangers of using 3g/4g in smartphones?

Since we should always avoid public networks, is there some sort of attack that intercept my online activity or steal passwords when I'm using 3g/4g? If exists, how I can protect myself from this type ...
3
votes
2answers
435 views

Does someone need to be connected to my network to sniff HTTP requests?

TL;DR Would a potential attacker need to have my Wi-Fi password and be connected to my network in order to read HTTP requests? Over the past year or so, I have made a few DIY home automation projects....
0
votes
1answer
145 views

is it possible to create a WEP wifi that accepts any password?

the same as evil twin fluxion but without captive portal so the victim connects to our fake Wep Wifi that accepts any password after getting disconnected from his Wpa 2 Wifi so we sniff data from the ...
0
votes
0answers
70 views

IPSec Sniff Traffic

I'm wondering if it is possible to Sniff IPSec connections. At the beginning of a connection, the two peers agree on a SA and exchange a PSK or Certificates. What I'm thinking about, is to ...
0
votes
0answers
290 views

How to capture non-HTTP or HTTPS URLs in Burp

I want to intercept URLs except for HTTP and HTTPS, is that possible with Burp Suite? For example, I want to get a response of following URL in Burp Suite: jar:file:///C:/Program%20Files/Mozilla%...
0
votes
1answer
90 views

How can I see the data content (HTML, JS, etc) in HTTPS responses in Wireshark?

I'm learning packet sniffing and analysis with Wireshark. At first, I could only see DNS, TCP, and ARP packets. I learned I couldn't see any HTTP packets because it was all encrypted in the transport ...
0
votes
1answer
731 views

Analyze / Sniff all packets from all devices connected to a router

First of all, before explaining what I'm trying to do, let me clarify that my intentions are not steal any information, as it's only for study purposes, not even for my own entertainment. I'm trying ...
0
votes
3answers
320 views

How can I capture all data from a specific device on my network?

I have an iPhone that is connected to my Wi-Fi at home. I want to capture ALL traffic from that iPhone (because it's my network) and record it and view it. I don't have physical access to the device. ...
0
votes
1answer
143 views

How to protect your wifi traffic from sniffing if untrusted people know the password?

WPA2 PSK is used to encrypt packets to and from a router. All the members on the network have the wifi password, so theoritically if one of them is untrustable they could be able to capture and ...
0
votes
2answers
1k views

How to eavesdrop and decrypt the HTTPs communication of an IoT device?

I am trying to setup a MitM scenario between an IoT device and WAN. It is possible and quite easy to achieve same thing for the application run on a mobile device by setting my proxy server(Fiddler)'s ...
2
votes
2answers
79 views

My AP is probing other device?

I just installed kismet 2018 Beta update on my kali and test run it on my host but i came across something that i dont understand and i would appreciate if someone would explain to me. When i check ...
1
vote
0answers
292 views

Bettercap/ettercap unable to detect HTTP packets

Basically, I am trying to sniff the network traffic from my other computer. So here's the situation: I am in a network, where: 192.168.1.1 - default gateway 192.168.1.24 - "victim" (my other ...
0
votes
1answer
448 views

Use bettercap to sniff traffic going through a proxy configured in the browser?

Using bettercap, how can I intercept traffic which goes to a proxy server which is configured in browser? With no proxy configured it is working fine. But as soon as a proxy is set in the browser ...
12
votes
4answers
4k views

Eavesdropping vs. sniffing

I'm taking a coursera course, and they take pains when talking about network security to distinguish between eavesdropping and sniffing. According to their definitions, sniffing involves reading or ...
1
vote
2answers
1k views

How can i sniff Telegram packets before they get encrypted?

So how can I sniff packets that are being sent from my computer to their server and from their servers to me using a sniffing app like Wireshark? right now when i use Wireshark, they are all ...
23
votes
2answers
4k views

Is telnet secure through SSH tunneling

Firstly sorry, maybe dumb question, but I have one service running on my server which can be operated only by telnet (port 23), but I know that telnet is insecure, so I blocked port 23 in iptables ...
0
votes
1answer
44 views

Tor website as proxy like receiving server

I want to create a anonymous application that will send data all the time to my server. I don't want my ip to be exposed so I wanted to use Tor. I wanted to send sniffed packets to this server and ...
0
votes
2answers
118 views

Analyzing pcap on the fly [closed]

I want to create a mini sniffing network. I asked in a previous question about how to capture and decrypt packets in real time. Now I want to analyze it, and I am developing a script for it but can ...
0
votes
1answer
102 views

Sniffing WiFi using monitor mode long-term and decrypting

So I wanted to sniff packets in my WiFi network. To capture them all I use monitor mode (as suggested in my previous question) . I know I can decrypt traffic using key by setting it in the wireshark ...
0
votes
1answer
316 views

Differentiating between IKEv2 and OpenVPN Traffic

There is a WiFi network that I regularly use, and it seems to be blocking all VPN traffic other than IKEv2. I tested this by downloading many of the free/freemium VPN apps from the Google Play Store ...
0
votes
3answers
163 views

Is it possible to intercept the payload of a secure request in plain text?

Consider we run the following request: import requests url="https://secretsub.example.com/secretpath/post.php" payload = {'secretmessage1' : 'foo','secretmessage2' : 'bar'} r = requests.post(url,...
0
votes
1answer
2k views

Sniffing an outbound HTTPS packet - only intercepted by certain software, can't decrypt

I'm trying to sniff an SSL-encrypted outbound packet. It's sent by the game Mass Effect 3 to an EA web service. When I sniff packets with Nirsoft SocketSniff, I can see the packet (positively ...
1
vote
0answers
360 views

Sniffing Tool Using Monitor Mode [closed]

As I understand it (fix me if I am wrong), there are two main ways of sniffing traffic from my wifi. I can use ARP Spoofing, to poison a device on my network then capture all of its communication. I ...
0
votes
1answer
610 views

Where is the data generated by ettercap -T -i wlan0 saved? [closed]

I executed this command out of curiosity: ettercap -T -i wlan0 After a couple of seconds, it started flooding my terminal emulator with loads of data (sniffed data, I guess). I think this data is ...
1
vote
0answers
59 views

Sniffing devices in a serial topology

I have the following setup: PBX Server -> Internet -> LAN -> IP Phone -> Workstation (PC) Which means that my computer is connected to the LAN, through a Dual Ethernet card on the IP ...
1
vote
1answer
804 views

Bettercap output file is empty after capture

I am trying to do a sniffing attack and I want to save a .pcap file with the result of the analysis. I use this command: bettercap --interface eth0 -X --proxy --sniffer-output /root/Escritorio/file....
1
vote
1answer
160 views

Can someone check internet usage using MAC Address [closed]

If I were to briefly connect to a network for like 2 mins would they be able to see everything i've browsed from my home network? If they knew my mac address? Sounds like a stupid question but am not ...
1
vote
1answer
82 views

Identify Network of Wireless Packet

When sniffing wireless packets from multiple networks, how do you tell which network a packet belongs to? The best guess I have right now is that you need to see the handshakes and get the mac addr ...
4
votes
1answer
243 views

Can smart power meters read key presses on a wired keyboard?

Smart power meters are becoming quite prevalent. Question: Can a smart power meter (with patched firmware) read the keys pressed on a wired PS/2 or USB keyboard, connected to a desktop computer? What ...
0
votes
1answer
1k views

How to use Wireshark to capture HTTP data for a device on the same network as me

I've setup a wifi router and connect my Kali Linux laptop and my Android mobile phone to it. I do know the password already (I've set it up) and I want to sniff all the data coming and going to the ...
2
votes
2answers
805 views

Data sniffing on a WEP 128-bit encryption

I am relatively new to cybersecurity and hacking and I aim to learn ethical hacking as a passion alongside my mainstream education(Electrical Engineering). My setup: I have set up my very own WEP ...
4
votes
1answer
1k views

Where would I place a sniffer to capture data in a home network with the following topology?

I am aware of the various techniques that there are to sniff around a network that has Hubs or Switches (port mirroring, hubbing out, use of taps), but I am not sure which method would be more ...
1
vote
1answer
1k views

How do I capture Wifi traffic in the wifi channel spectrum?

How could I capture traffic from every AP near me? For example using tcpdump or tshark and a channel hopping script(Channel 1-11). Is this possible? I have tried with tcpdump and a channel hopping ...