Questions tagged [sniffing]

A sniffer is a program that monitors and analyzes network traffic.

Filter by
Sorted by
Tagged with
0 votes
0 answers
10 views

Is There an MITMf ScreenShotter plugin for modern tools like bettercap?

I am looking for a plugin like the ScreenShotter , which is capable of capturing a screen shot of other local network connected devices opened browsers pages using html5 canvas A demo of ScreenShotter ...
user avatar
0 votes
0 answers
41 views

How network segmentation affects network monitoring/MITM and interconnectivity of devices

How does network segmentation affect network packet sniffing, man-in-the-middle attacks and interconnectivity of devices? I am mainly interested in understanding the possibilities of network malware ...
user avatar
  • 33
1 vote
1 answer
82 views

Is authentication through mail clients safe when encryption is off?

When adding an account on a mail client, the SSL/TLS is usually turned off and the encryption method is 'none' (see Outlook example below). Is the password safely sent through the internet when ...
user avatar
1 vote
3 answers
149 views

If I only connect through encrypted protocols like TLS, is there still a risk over an insecure wifi?

Assuming the attacker can read all the traffic (he cracked my WPA2 for example), is there still something he can do if i'm only connecting through TLS and similar protocols ?
user avatar
  • 111
0 votes
1 answer
52 views

Why do we need to connect to a network to be able to read all packets while packet sniffing?

I can't understand much about packet sniffing operation when it's in a network. Well, packets are encrypted with PTK to prevent sniffing from monitor mode but when we are in client mode and we ...
user avatar
0 votes
1 answer
59 views

What's injected interception?

I was reading this pdf and at slide number 23 and 24 I read "injected interception". What's that means ? in my mind it should be a type of interception that are made by injection. I mean I ...
user avatar
  • 105
1 vote
1 answer
357 views

How can someone on the same GPON splitter network sniff my internet traffic?

I currently have a fiber optic internet connection at home. My ISP uses GPON where the ONU acts as a gateway device which has a direct fiber optic connection to it. ONU is a Huawei HG8145V5. I ...
user avatar
0 votes
1 answer
116 views

What information is sent through companies VPNs?

I'm currently working at home. My employer provides me a VPN access to the company resources: intranet, ssh access to computers, etc. I was wondering what exactly means to use a VPN, and what type of ...
user avatar
  • 101
1 vote
0 answers
278 views

Looking for origin/ verification of malicious domain names [closed]

My network sniffer for websites has discovered a number of hosting domains in the report which I can not correctly assign to categories. I don't know if there are providers behind these domains that ...
user avatar
  • 11
0 votes
0 answers
66 views

Meaning of Broadcasting WAN status in Cain ARP Poison Routing

I was going through Cain and Abel's Manual to perform an ARP Poison Routing attack, also known as APR and it mentioned that while performing the attack between a host and gateway, we could see '...
user avatar
0 votes
3 answers
149 views

Can a powerline network adapter be more easily used to listen to traffic on another router?

A roommate of mine asked me to connect a powerline adapter to the network. The ethernet cable of the adapter is connected to an Apple Airport Express router which is connected to a Frontier Internet ...
user avatar
  • 101
0 votes
0 answers
83 views

Constructing PTK key from sniffed traffic and decrypting WPA2 network traffic using it

Suppose there is a WPA2/PSK access point (AP) and 2 clients are connected to it, say X and Y. So X and Y both know the password or PSK required for authentication. From here: In case of WPA2/PSK when ...
user avatar
0 votes
0 answers
115 views

Is it possible to sniff packets from a remote IP? [duplicate]

For a while I have been playing around with packet sniffing on my local network (using an ARP poisoning attack to redirect packets to me, then relaying them and viewing them in wireshark). However, I ...
user avatar
1 vote
0 answers
91 views

What data can be sniffed in a LoRaWAN network at various points?

What data or metadata can be sniffed in a LoRaWAN network at various points like the end-device (node), the gateway, the network server and the application server? Is there exists a standardized data ...
user avatar
  • 11
0 votes
1 answer
392 views

Is it possible to detect a Telegram user by sniffing traffic?

Here's the article from the Belarusian website http://dev.by, it is an interview with a former member of dictator Lukashenko band (so-called Chief Organized Crime and Corruption Fighting Directorate). ...
user avatar
  • 101
0 votes
1 answer
112 views

VPN data encryption from VPN server to destination

When we connect to a VPN server, all data that we send and receive are in encrypted form. But when data is sent from the VPN server to the destination, is the data encrypted? If not then any hacker ...
user avatar
  • 1
0 votes
0 answers
115 views

Can an attacker intercept mobile traffic exploiting SS7 vulnerability?

Can an attacker intercept my mobile traffic exploiting the ss7 vulnerability even if encrypted?
user avatar
0 votes
2 answers
153 views

Extrapolating home address of a visitor when they click on an e-mail phishing link (Mr Robot)

In Mr Robot season 3, the feds are set up in a safe house spying on Elliot's internet communications (with packet sniffers?) when they intercept an email from Elliot to someone else containing a link ...
user avatar
0 votes
0 answers
2k views

besside-ng "bad beacon" error when attempting to deauth (aircrack-ng)

Equipment: Alfa AWUS036ACH Wi-Fi adapter AC1200 Fresh Install of Kali Linux, fully updated (not on a VM) I have been running across this same "bad beacon" error (sometimes with "DEAUTH&...
user avatar
2 votes
1 answer
188 views

Hide devices connected to WiFi

I'm a noob in home security and networking. I suspect one of my neighbor is sniffing packets destined to my wifi router. I have many questions about this Will they be able to identify the no. of ...
user avatar
  • 23
0 votes
1 answer
104 views

Can message length be useful information?

Suppose a packet is encrypted and sent via an insecure channel so that it is intercepted by a malicious third party as well as the intended recipient. As long as a suitable encryption scheme is used, ...
user avatar
1 vote
0 answers
261 views

Wireshark how do I see data from a phone on the same network

So I am wondering how can I see the data on wireshark? I have my router setup to where there is no password so I can automatically connect whatever devices on to my network. First I connect my phone ...
user avatar
  • 11
1 vote
1 answer
110 views

How to avoid password TCP message sniffing and subsequent hijacking

I'm developing a TCP Streaming API for "IoT" devices in LabView. The TCP Server will be listening to a certain port, and our devices will try to connect to it. In order to know that the connecting ...
user avatar
  • 113
4 votes
2 answers
2k views

What does WPA2 traffic look like to a packet sniffer that is not connected to the network?

Imagine there is a wireless network using WPA2, and an attacker has come along with his wireless card in monitor mode. What will the packets from that network look like? Is any information disclosed i....
user avatar
0 votes
1 answer
503 views

I have .Kismet files in my root directory. Where could they come from and are they dangerous?

I use Parrot OS security. When i was listing the contents in my root dir i noticed some weird file names that end with .Kismet. I know that kismet is a network intrusion detection software which is ...
user avatar
  • 1
2 votes
1 answer
3k views

Intercepting TCP traffic through MITM attack

I'm trying to capture TCP requests through Burp Suite with this hacky method. Basically it listens for user selected protocol requests (TCP/UDP) and then forwards them to Burp Suite (or any other ...
user avatar
  • 43
0 votes
1 answer
173 views

Remote working. Is my employer able to monitor my activity

Due to situation, my employer made a work-from-home policy. And remote administration tool is not installed, since I did clean installation of the system. Is my employer able to see my activity? ...
user avatar
0 votes
1 answer
195 views

Using an active or passive scan, can I detect all devices connected to or transmitting via a Wifi network?

I know that it's possible to do a passive scan on all channels to see if an access point sends a beacon. However, is it also possible to listen to general Wifi traffic on that channel and assemble a ...
user avatar
  • 203
3 votes
3 answers
2k views

Is there any point of arp spoofing on a wifi network?

I know that arp spoofing is required on a LAN network due to the fact that data is sent directly to a destination, but what about for a WLAN network? All packets can be seen if you are in promiscuous ...
user avatar
-1 votes
2 answers
358 views

Can Wireshark resolve https domain name?

Can I use Wireshark to see what websites are visited on my network? I'm just looking for the domain name, and not a full url or any credentials. Would I need any additional tools such as sslstrip to ...
user avatar
5 votes
3 answers
2k views

What are the advantages and disadvantages of using a HackRF One compared to specific protocol sniffers?

I am performing some research on IoT test tools and came across the HackRF One which can transmit and receive from 1 MHz to 6 GHz. I therefore think that it can analyze many protocols, but I cannot ...
user avatar
  • 187
0 votes
0 answers
20 views

Sniffing Traffic Android App [duplicate]

So, imagine that a vulnerable app provides a login interface. This login sends the user's credentials to the App's server to authenticate the user. However this is done via HTTP, therefore not secure. ...
user avatar
1 vote
1 answer
3k views

How to sniff direct websocket connection in android ( i.e. no HTTP Upgrade connections ) using BURP?

I've pentested a lot of websites and a few apps too but this app eludes them all. On the websites, when there's a websocket upgrade the BURP proxy recognizes it and starts showing it in the websockets ...
user avatar
1 vote
0 answers
100 views

Packets shown are mostly 802.11 despite open network

I'm currently trying to see if it's possible to sniff MQTT packets between two raspberry pi's from a wireless adapter in monitor mode attached to my PC. I ran the following command on my PC (Kali ...
user avatar
  • 11
4 votes
1 answer
466 views

Is there a reason why ARP spoofing would be used for spying instead of sniffing promiscuously?

I am a student trying to demonstrate an ARP spoofing attack. To test whether my attack was working I decided to use wireshark to sniff the packets on the attacking machine. At first I thought I was ...
user avatar
  • 143
10 votes
3 answers
3k views

Can network traffic between Docker containers be sniffed?

On normal networks, it is a security risk to send plaintext data, since attackers can sniff or even manipulate all traffic. Encryption is required for secure communication. When using Docker ...
user avatar
  • 28.5k
3 votes
1 answer
679 views

Is eavesdropping possible over smpp?

I don't know much about the SMPP protocol, but I often hear that it is not a secure protocol. If Alice sends a SMS to Bob, can Eve view what Alice sent to him? If yes, can you give an example on how ...
user avatar
-2 votes
1 answer
95 views

Monitor data traffic in chrome:// protocols

With Burp Suite we can capture the traffic of protocols like http, https. But i want now monitor the data traffic in urls like chrome://settings
user avatar
  • 101
0 votes
0 answers
449 views

How to find sniff communication to smart card reader?

I use a smart card reader and I want to know if the reader is secure. How to sniff communication between card and card reader?
user avatar
  • 187
0 votes
1 answer
816 views

ip_forward reverting back to 0 during ettercap subnet scanning [closed]

Im trying to arp spoof a local network but the /proc/sys/net/ipv4/ip_forward is reverting back to 0 when ettercap is performing subnet scan on a network hub. Even if i change it back to 1 after the ...
user avatar
  • 29
0 votes
0 answers
1k views

Intercept TCP traffic using Python

Situation: I am trying to intercept TCP (not HTTP) traffic on a Windows machine using Python. I am posting this question as most answers I was able to find teaches how to sniff traffic. Normal ...
user avatar
0 votes
0 answers
57 views

How does an open network without a password expose other connections? [duplicate]

I read here, but that wasn't related. If userA is connected to router and userB is connected to the same router, then how can userB sniff communications between userA and the router? I've see a ...
user avatar
  • 103
1 vote
0 answers
161 views

Bluetooth security [closed]

How secure is it to use Bluetooth handsfree? Can't someone eavesdrop the signals and listen to the conversation? Does encryption in Bluetooth secure the information? Can I use anyother tool ...
user avatar
1 vote
2 answers
2k views

Capture wireless traffic in PROMISCUOUS mode (not monitor mode)

I am trying to capture packets from other devices that are connected to the same network as I am. I know the difference between monitor mode and promiscuous mode (explained in this question), but for ...
user avatar
  • 15
0 votes
1 answer
122 views

Is it possible to infer advanced cookie properties like expiration from Wireshark

I want to perform a cookie injection attack for demonstration purposes. I could achieve this using Firefox Cookie-Editor extension. However, the attack can only succeed if I enter the cookie name, ...
user avatar
  • 3
1 vote
0 answers
108 views

PEAP MS-CHAPv2 brute force attack

I have a 802.1x switch and a client authenticated using PEAP-MS-CHAPv2. I sniffed the traffic using a HUB between the client and the switch. How can I use the captured informations to perform a brute-...
user avatar
  • 11
0 votes
0 answers
153 views

What is wrong with this ettercap dump file?

I am trying to read a dump file which is created with ettercap. But when I am trying to read it with ettercap it is saying: Error while capturing: bogus savefile header And I can't read the file with ...
user avatar
2 votes
0 answers
234 views

Sniffing TCP packets using Wireshark

I am trying to reverse engineer a decoder. To do so I need to sniff the packets that the decoder receives from an Android application installed on my phone, this application is what controls the ...
user avatar
  • 121
1 vote
1 answer
129 views

Is it possible that a Peer AS over BGP can sniff other AS traffic?

Is it possible that one AS can sniff another peer's traffic?
user avatar
2 votes
1 answer
8k views

Wireshark - How to see the domain of HTTPS websites visited

How can I see the domain name of https websites that are visited on my network? I know I'm not able to see the full url, just the websites ip or domain. I think it my be possible with a reverse dns ...
user avatar
  • 21