Questions tagged [sniffing]
A sniffer is a program that monitors and analyzes network traffic.
1
vote
0answers
12 views
Bettercap/ettercap unable to detect HTTP packets
Basically, I am trying to sniff the network traffic from my other computer. So here's the situation:
I am in a network, where:
192.168.1.1 - default gateway
192.168.1.24 - "victim" (my other ...
0
votes
1answer
52 views
Use bettercap to sniff traffic going through a proxy configured in the browser?
Using bettercap, how can I intercept traffic which goes to a proxy server which is configured in browser?
With no proxy configured it is working fine. But as soon as a proxy is set in the browser ...
11
votes
4answers
3k views
Eavesdropping vs. sniffing
I'm taking a coursera course, and they take pains when talking about network security to distinguish between eavesdropping and sniffing.
According to their definitions, sniffing involves reading or ...
0
votes
1answer
80 views
How can i sniff Telegram packets before they get encrypted?
So how can I sniff packets that are being sent from my computer to their server and from their servers to me using a sniffing app like Wireshark?
right now when i use Wireshark, they are all ...
22
votes
2answers
4k views
Is telnet secure through SSH tunneling
Firstly sorry, maybe dumb question, but I have one service running on my server which can be operated only by telnet (port 23), but I know that telnet is insecure, so I blocked port 23 in iptables ...
0
votes
1answer
34 views
Tor website as proxy like receiving server
I want to create a anonymous application that will send data all the time to my server. I don't want my ip to be exposed so I wanted to use Tor. I wanted to send sniffed packets to this server and ...
0
votes
2answers
58 views
Analyzing pcap on the fly [closed]
I want to create a mini sniffing network. I asked in a previous question about how to capture and decrypt packets in real time.
Now I want to analyze it, and I am developing a script for it but can ...
0
votes
1answer
73 views
Sniffing WiFi using monitor mode long-term and decrypting
So I wanted to sniff packets in my WiFi network. To capture them all I use monitor mode (as suggested in my previous question) . I know I can decrypt traffic using key by setting it in the wireshark ...
0
votes
1answer
64 views
Differentiating between IKEv2 and OpenVPN Traffic
There is a WiFi network that I regularly use, and it seems to be blocking all VPN traffic other than IKEv2. I tested this by downloading many of the free/freemium VPN apps from the Google Play Store ...
0
votes
3answers
74 views
Is it possible to intercept the payload of a secure request in plain text?
Consider we run the following request:
import requests
url="https://secretsub.example.com/secretpath/post.php"
payload = {'secretmessage1' : 'foo','secretmessage2' : 'bar'}
r = requests.post(url,...
0
votes
1answer
165 views
Sniffing an outbound HTTPS packet - only intercepted by certain software, can't decrypt
I'm trying to sniff an SSL-encrypted outbound packet. It's sent by the game Mass Effect 3 to an EA web service.
When I sniff packets with Nirsoft SocketSniff, I can see the packet (positively ...
1
vote
0answers
187 views
Sniffing Tool Using Monitor Mode [closed]
As I understand it (fix me if I am wrong), there are two main ways of sniffing traffic from my wifi.
I can use ARP Spoofing, to poison a device on my network then capture all of its communication.
I ...
0
votes
1answer
116 views
Where is the data generated by ettercap -T -i wlan0 saved? [closed]
I executed this command out of curiosity:
ettercap -T -i wlan0
After a couple of seconds, it started flooding my terminal emulator with loads of data (sniffed data, I guess). I think this data is ...
1
vote
0answers
39 views
Sniffing devices in a serial topology
I have the following setup:
PBX Server -> Internet -> LAN -> IP Phone -> Workstation (PC)
Which means that my computer is connected to the LAN, through a Dual Ethernet card on the IP ...
1
vote
1answer
170 views
Bettercap output file is empty after capture
I am trying to do a sniffing attack and I want to save a .pcap file with the result of the analysis. I use this command:
bettercap --interface eth0 -X --proxy --sniffer-output /root/Escritorio/file....
1
vote
1answer
106 views
Can someone check internet usage using MAC Address [closed]
If I were to briefly connect to a network for like 2 mins would they be able to see everything i've browsed from my home network? If they knew my mac address?
Sounds like a stupid question but am not ...
1
vote
1answer
51 views
Identify Network of Wireless Packet
When sniffing wireless packets from multiple networks, how do you tell which network a packet belongs to?
The best guess I have right now is that you need to see the handshakes and get the mac addr ...
4
votes
1answer
199 views
Can smart power meters read key presses on a wired keyboard?
Smart power meters are becoming quite prevalent. Question: Can a smart power meter (with patched firmware) read the keys pressed on a wired PS/2 or USB keyboard, connected to a desktop computer? What ...
0
votes
1answer
828 views
How to use Wireshark to capture HTTP data for a device on the same network as me
I've setup a wifi router and connect my Kali Linux laptop and my Android mobile phone to it.
I do know the password already (I've set it up) and I want to sniff all the data coming and going to the ...
2
votes
2answers
504 views
Data sniffing on a WEP 128-bit encryption
I am relatively new to cybersecurity and hacking and I aim to learn ethical hacking as a passion alongside my mainstream education(Electrical Engineering).
My setup: I have set up my very own WEP ...
4
votes
1answer
804 views
Where would I place a sniffer to capture data in a home network with the following topology?
I am aware of the various techniques that there are to sniff around a network that has Hubs or Switches (port mirroring, hubbing out, use of taps), but I am not sure which method would be more ...
1
vote
1answer
613 views
How do I capture Wifi traffic in the wifi channel spectrum?
How could I capture traffic from every AP near me? For example using tcpdump or tshark and a channel hopping script(Channel 1-11). Is this possible?
I have tried with tcpdump and a channel hopping ...
1
vote
0answers
350 views
Can https traffic be sniffed on public networks? and will a vpn help security on public networks? [duplicate]
I'm getting into network security and similar lately (still a noob though) and I was playing around with wireshark. I know you can sniff http traffic very easily and I read here on stack exchange that ...
3
votes
2answers
142 views
Does VPNs even protect ftp and virtual machines connections?
I have to go out for some days and I'll stay in a hotel.
During these days I will also have to work on some websites code and VMs that call external APIs.
Not being a system administrator nor a ...
0
votes
2answers
148 views
Legality of sniffing own traffic between mobile app and server
Recently I found a bug on a mobile app which claims to protect their users' privacy, however after connecting my phone with burp and installing a certificate I noticed that this app was sending a ...
2
votes
1answer
573 views
How does WiFi NIC monitoring mode work, if at all? [closed]
I always wondered, when connected to WIFI network, does my NIC receives packets directly from other computers (not ones that passed through the router) and ignores them (similarly to what happens when ...
4
votes
4answers
663 views
Sniff packets of a wired computer
in my home network my own PC is connected with a wire to the router. I want to do some analysis on the packets so I got an old laptop and tried to sniff my PC packets with the laptop (that is ...
0
votes
1answer
354 views
Site-to-SIte OpenVPN with shared key
I have two physical sites each with edge router/firewall running pfSense they are directly connected through a WAN link. I've deployed site-to-site OpenVPN using pre-shared key to create tunnel on top ...
1
vote
0answers
185 views
Detecting Guest to Guest Traffic in Virtualbox Using Host Running Snort
Not sure if this is a simple question but I was hoping for some insight into finishing a pentest lab. My goal is to have Snort sniff an attack in a virtual environment between two guest VM's. My ...
0
votes
1answer
696 views
Why does Ettercap scan the wrong hosts?
Details:
I'm running three virtual machines on VMware Workstation:
Virtual Machine 1: Windows 7. Using static ip: 10.1.1.1
Virtual Machine 2: Windows server 2008. Using static ip 10.1.1.2
Virtual ...
3
votes
1answer
153 views
Security onion only Seeing broadcast traffic and its own traffic
I am attempting to test my new security onion install. I have it set up on a static IP Ethernet adapter in a virtual machine with an IP of 10.0.3.47
When I go launch Sguill, it seems to work well ...
1
vote
1answer
159 views
Does netdiscover spoofs ip address?
I am trying to discover hosts in my network. So I have connected external TPLINK wireless card to my virtual computer for internet and when I do ifconfig, it gives me IP address, 192.168.2.6
I used ...
1
vote
1answer
848 views
Sniffing ldap credentials?
I am going to performing an internal pentest. Is it possible to sniff active directory credentials using Wireshark or Ettercap when a user logs on and authenticates to using their domain credentials?
2
votes
1answer
728 views
Is a Captive Portal Wifi AP as insecure as an open unencrypted Wifi?
As far as I understand, the captive portal is implemented by some sort of iptable firewall rules. Since there is no handshake established during the initial association with the AP(As no passphrase is ...
0
votes
0answers
122 views
How feasible would it be to sniff traffic between an Authentication Server and a RADIUS server in a corporate setting?
For WPA enterprise in the corporate world, is the RADIUS server connected to the Authenticator/Access Point wirelessly or 'wiredly' for most situations? If they are connected wirelessly, does this ...
2
votes
2answers
1k views
Is is possible to decrypt 802.11 for WPA enterprise?
So it is fairly trivial to decrypt 802.11 for WPA-PSK as explained in this link https://wiki.wireshark.org/HowToDecrypt802.11. Is it then possible to decrypt the same way for WPA enterprise?(Assuming ...
0
votes
1answer
380 views
Sniffing the whole traffic within a network range
How is it possible to sniff the whole traffic within a network range even if it's beyond your subnet scope?
For instance, consider your machine having the IP address of 172.16.96.25, but you need to ...
0
votes
3answers
489 views
Best options for SSL inspection while maintaining Perfect Forward Secrecy
We are looking to monitor inbound HTTPS connections for performance issues as well as errors. HTTP requests we are able to gather this information just fine, but we don't have a way to do this while ...
0
votes
1answer
98 views
Which chain of the iptables receives the sniffed packets
Host C is using wireshark to sniff packets from Host A to Host B. I am able to see those packets from wireshark but I am not able to find them in the PREROUTING chain of iptables. When Host C ...
0
votes
0answers
23 views
Invisible SSL sniffing [duplicate]
My question is pretty brief: may I accomplish invisible sniffing of secure traffic with(HTTPS) via sniffer, using my own certificate but signed by some commonly known CA(like verisign or smth like ...
4
votes
1answer
85 views
Would it be possible for an ISP to guess specific requests on an HTTPS site using package size? [duplicate]
In light of the recent senate decision in the US to allow ISPs to sell users' browsing history, I've been reading of recommendations on how users can retain their privacy. One of the common ...
1
vote
2answers
253 views
Wireshark / TCPdump captures only part of HTTP request packets
I wanted to do some in-house research and check how many and what kind of packets I can capture from/to my in-house open Wi-Fi router.
I had Kali Linux installed on Windows 10 machine (Virtualbox) ...
6
votes
2answers
1k views
Sniffing unencrypted traffic in datacenter
Please explain how is it possible to sniff packets from within the datacenter.
Some background. I am studying networking options for DigitalOcean. My goal is to make sure that data exchange between ...
1
vote
1answer
372 views
Sniff API request through proxy
I have an iOS application that consumes an API. That application sucks so I was trying to "discover" that API and make my own application consuming that API.
The issue is that the API is under SSL/...
1
vote
2answers
347 views
Sniffing the data around me
Scenario:
no router, just a laptop network card turned in monitor mode.
(imagine you are in the bus or train)
In this scenario can I see all the data that is going through air around me?
Can I ...
0
votes
1answer
87 views
Is it possible to analyze real Single Sign-On (SSO) messages via network sniffing?
I am thinking how to gain and analyze the information in the real SSO (request/response) messages, for some commercial SSO solutions.
The challenge is that most commercial SSO solutions are black-box ...
0
votes
0answers
23 views
Can someone without router password sniff packets of all device connected on it? [duplicate]
I am right now connected to a public wifi that I trust because it's the Wifi of my college. But I am worried that other students connected on the same network can see my browser history using packet ...
2
votes
1answer
2k views
What does SSI signal does mean in captured packets in wireshark?
In the packet captured below, captured by wireshark
does the SSI Signal in dBm represents the power at which the sniffing network adapter (say USB network adapter wlan1 on Raspberry Pi3) received ...
0
votes
1answer
131 views
Sniff packets of a remote network [duplicate]
Is it possible to sniff some packets from a friend network from my network?
If it's possible, how?
3
votes
1answer
344 views
blackbox pentest newbie - find valid internal IP adress from unknown range
I`m a beginner and would like to know, how can you find a valid IP adress to start your scan, if all you have is the LAN cable....nothing more.
No DHCP is enabled.
Any hints or clues on how to figure ...
