Questions tagged [sniffing]
A sniffer is a program that monitors and analyzes network traffic.
176
questions
0
votes
1
answer
332
views
Using an active or passive scan, can I detect all devices connected to or transmitting via a Wifi network?
I know that it's possible to do a passive scan on all channels to see if an access point sends a beacon. However, is it also possible to listen to general Wifi traffic on that channel and assemble a ...
CommunityBot
- 1
1
vote
2
answers
515
views
How easy is it for hackers to intercept http traffic between VPN exitnode and the destination web service without being inside the VPN or web server?
Let’s say I’m using http connection over a properly set up VPN with secure protocol and implementation. Then, most likely, the connection will be secure all the way until it exits the VPN server.
But ...
CommunityBot
- 1
3
votes
2
answers
489
views
Do VPNs even protect ftp and virtual machine connections?
I have to go out of town and stay in a hotel.
During these days I will also have to work on some websites code and VMs that call external APIs.
Not being a system administrator nor a security ...
- 128k
0
votes
1
answer
523
views
fTPM more secure than TPM when using Bitlocker?
Is fTPM more secure than a real TPM module when using Bitlocker?
As far as I know, you should enable pre-boot authentication if you use a TPM module that is plugged separately onto the motherboard to ...
- 121
0
votes
0
answers
17
views
Can an attacker sniff the encryption details when connecting to a VPN? [duplicate]
I thought I would be protected from sniffing if I use a VPN, even in a setting where my traffic is going through a «man-in-the-middle» either by ARP poisoning or an evil twin attack.
Now I was told, ...
- 128k
0
votes
2
answers
305
views
VPN data encryption from VPN server to destination
When we connect to a VPN server, all data that we send and receive are in encrypted form. But when data is sent from the VPN server to the destination, is the data encrypted?
If not then any hacker ...
- 2,125
8
votes
2
answers
12k
views
Is promiscuous mode sufficient to sniff packets in a wifi network?
I'm connected to my WiFi network and I want to capture and analyze packets that other clients are exchanging with the gateway. I don't want to modify the content of these packets and I don't need to ...
CommunityBot
- 1
0
votes
0
answers
76
views
Are there any attacks against TLS 1.1 encryption? [duplicate]
I've been researching the main TLS 1.1 vulnerabilities, and from what I've seen, TLS 1.2 only improves the cryptographic hash functions, because TLS s 1.1 are broken.
If these hash functions are ...
- 128k
0
votes
0
answers
2k
views
besside-ng "bad beacon" error when attempting to deauth (aircrack-ng)
Equipment: Alfa AWUS036ACH Wi-Fi adapter AC1200
Fresh Install of Kali Linux, fully updated (not on a VM)
I have been running across this same "bad beacon" error (sometimes with "DEAUTH&...
- 1
1
vote
1
answer
293
views
How can authoritarian governments sniff TLS encrypted traffic on mass scale?
I tried sniffing TLS web traffic on my own network and I always run against the following complications:
I need to install an additional root cert on my devices
I need to root my phone to do ...
- 46.2k
2
votes
2
answers
234
views
What is the name of the box that hackers connect to a router in order to spy on all your traffic?
I watched a documentary where hackers entered a victim's house by pretending to be from the ISP and then connected a box to a router in order to spy on all of the victim's traffic. Later, the hackers ...
1
vote
1
answer
483
views
Is TLS needed on loopback for local security?
So the scenario is that we have a server shared with a number of users, with me being the server administrator and able to determine permission assignments.
The server is running a service on loopback ...
- 46.2k
0
votes
0
answers
95
views
How to capture data and answer with simulated data?
I use Wireshark and other relatively smaller sniffers to make some tests.
I share my internet to my second PC. However, I have to spend much time for the following task, and want to know if i can do ...
- 947
0
votes
1
answer
660
views
Differentiating between IKEv2 and OpenVPN Traffic
There is a WiFi network that I regularly use, and it seems to be blocking all VPN traffic other than IKEv2. I tested this by downloading many of the free/freemium VPN apps from the Google Play Store ...
CommunityBot
- 1
0
votes
0
answers
41
views
On the gains and losses of an additional client side stretching of the user password [duplicate]
Picture a state of the art implementation of a website registration and login system.
I'm interested in analyzing what a defender gains and loses by feeding the user password to a key-stretching KDF ...
- 1,231
3
votes
2
answers
1k
views
How to identify L2 devices in a Wide Area Network?
This is sample of a traceroute to google.com:
TraceRoute from Network-Tools.com to 216.58.194.46 [google.com]
Hop (ms) (ms) (ms) IP Address Host name
1 0 0 0 ...
- 1
1
vote
2
answers
971
views
Can packets on one home wifi network be sniffed by a computer on a different home wifi network?
It seems that every question I've researched on this topic makes the general statement "on my home wifi network" which doesn't specifically address my question.
I'm about to start a new job ...
- 4,066
0
votes
1
answer
5k
views
Why does Ettercap scan the wrong hosts?
Details:
I'm running three virtual machines on VMware Workstation:
Virtual Machine 1: Windows 7. Using static ip: 10.1.1.1
Virtual Machine 2: Windows server 2008. Using static ip 10.1.1.2
Virtual ...
3
votes
2
answers
4k
views
How to intercepting iOS HTTPS traffic
How can I intercept & parse through the SSL traffic (incoming & outgoing) generated by my iPad application?
- 12.8k
1
vote
1
answer
154
views
Is authentication through mail clients safe when encryption is off?
When adding an account on a mail client, the SSL/TLS is usually turned off and the encryption method is 'none' (see Outlook example below).
Is the password safely sent through the internet when ...
- 13
1
vote
3
answers
178
views
If I only connect through encrypted protocols like TLS, is there still a risk over an insecure wifi?
Assuming the attacker can read all the traffic (he cracked my WPA2 for example), is there still something he can do if i'm only connecting through TLS and similar protocols ?
0
votes
1
answer
89
views
Why do we need to connect to a network to be able to read all packets while packet sniffing?
I can't understand much about packet sniffing operation when it's in a network.
Well, packets are encrypted with PTK to prevent sniffing from monitor mode but when we are in client mode and we ...
- 198k
0
votes
1
answer
74
views
What's injected interception?
I was reading this pdf and at slide number 23 and 24 I read "injected interception". What's that means ?
in my mind it should be a type of interception that are made by injection. I mean I ...
- 198k
4
votes
1
answer
404
views
Can smart power meters read key presses on a wired keyboard?
Smart power meters are becoming quite prevalent. Question: Can a smart power meter (with patched firmware) read the keys pressed on a wired PS/2 or USB keyboard, connected to a desktop computer? What ...
- 66.5k
1
vote
1
answer
1k
views
How can someone on the same GPON splitter network sniff my internet traffic?
I currently have a fiber optic internet connection at home. My ISP uses GPON where the ONU acts as a gateway device which has a direct fiber optic connection to it. ONU is a Huawei HG8145V5.
I ...
- 66
0
votes
1
answer
272
views
What information is sent through companies VPNs?
I'm currently working at home. My employer provides me a VPN access to the company resources: intranet, ssh access to computers, etc. I was wondering what exactly means to use a VPN, and what type of ...
- 306
1
vote
0
answers
357
views
Looking for origin/ verification of malicious domain names [closed]
My network sniffer for websites has discovered a number of hosting domains in the report which I can not correctly assign to categories. I don't know if there are providers behind these domains that ...
- 128k
0
votes
3
answers
252
views
Can a powerline network adapter be more easily used to listen to traffic on another router?
A roommate of mine asked me to connect a powerline adapter to the network. The ethernet cable of the adapter is connected to an Apple Airport Express router which is connected to a Frontier Internet ...
- 248
0
votes
0
answers
170
views
Can an attacker intercept mobile traffic exploiting SS7 vulnerability?
Can an attacker intercept my mobile traffic exploiting the ss7 vulnerability even if encrypted?
- 128k
12
votes
4
answers
5k
views
Can someone use WiFi snooping to see data I send through Tor Browser when I'm not using SSL?
(NOTE: I've read other similar questions, but I'm not at all certain about this, therefore I'm asking.)
I travel a lot, and I generally use public WiFi spots and hotels/hostels/boarding houses etc. ...
- 129
1
vote
0
answers
146
views
What data can be sniffed in a LoRaWAN network at various points?
What data or metadata can be sniffed in a LoRaWAN network at various points like the end-device (node), the gateway, the network server and the application server? Is there exists a standardized data ...
- 11
0
votes
1
answer
1k
views
Is it possible to detect a Telegram user by sniffing traffic?
Here's the article from the Belarusian website http://dev.by, it is an interview with a former member of dictator Lukashenko band (so-called Chief Organized Crime and Corruption Fighting Directorate). ...
- 5,406
0
votes
2
answers
189
views
Extrapolating home address of a visitor when they click on an e-mail phishing link (Mr Robot)
In Mr Robot season 3, the feds are set up in a safe house spying on Elliot's internet communications (with packet sniffers?) when they intercept an email from Elliot to someone else containing a link ...
- 46.2k
1
vote
2
answers
3k
views
Bettercap output file is empty after capture
I am trying to do a sniffing attack and I want to save a .pcap file with the result of the analysis. I use this command:
bettercap --interface eth0 -X --proxy --sniffer-output /root/Escritorio/file....
- 241
2
votes
1
answer
692
views
Hide devices connected to WiFi
I'm a noob in home security and networking. I suspect one of my neighbor is sniffing packets destined to my wifi router. I have many questions about this
Will they be able to identify the no. of ...
- 12.7k
3
votes
3
answers
4k
views
How to sniff 802.11 packets without going into monitor mode?
Is it possible to sniff or capture 802.11 packets which sends my computer to the router (AP). I know that I can't sniff packets which have a other destination MAC address without going into monitor ...
0
votes
1
answer
118
views
Can message length be useful information?
Suppose a packet is encrypted and sent via an insecure channel so that it is intercepted by a malicious third party as well as the intended recipient. As long as a suitable encryption scheme is used, ...
- 198k
1
vote
0
answers
815
views
Wireshark how do I see data from a phone on the same network
So I am wondering how can I see the data on wireshark?
I have my router setup to where there is no password so I can automatically connect whatever devices on to my network.
First I connect my phone ...
- 11
1
vote
1
answer
163
views
How to avoid password TCP message sniffing and subsequent hijacking
I'm developing a TCP Streaming API for "IoT" devices in LabView.
The TCP Server will be listening to a certain port, and our devices will try to connect to it. In order to know that the connecting ...
- 29.6k
5
votes
2
answers
3k
views
What does WPA2 traffic look like to a packet sniffer that is not connected to the network?
Imagine there is a wireless network using WPA2, and an attacker has come along with his wireless card in monitor mode. What will the packets from that network look like? Is any information disclosed i....
- 18.7k
1
vote
1
answer
5k
views
How to sniff direct websocket connection in android ( i.e. no HTTP Upgrade connections ) using BURP?
I've pentested a lot of websites and a few apps too but this app eludes them all.
On the websites, when there's a websocket upgrade the BURP proxy recognizes it and starts showing it in the websockets ...
CommunityBot
- 1
0
votes
1
answer
902
views
I have .Kismet files in my root directory. Where could they come from and are they dangerous?
I use Parrot OS security.
When i was listing the contents in my root dir i noticed some weird file names that end with .Kismet.
I know that kismet is a network intrusion detection software which is ...
- 111
4
votes
1
answer
806
views
Is there a reason why ARP spoofing would be used for spying instead of sniffing promiscuously?
I am a student trying to demonstrate an ARP spoofing attack. To test whether my attack was working I decided to use wireshark to sniff the packets on the attacking machine. At first I thought I was ...
- 12.7k
2
votes
1
answer
4k
views
Intercepting TCP traffic through MITM attack
I'm trying to capture TCP requests through Burp Suite with this hacky method.
Basically it listens for user selected protocol requests (TCP/UDP) and then forwards them to Burp Suite (or any other ...
- 3,456
2
votes
3
answers
4k
views
Is there any point of arp spoofing on a wifi network?
I know that arp spoofing is required on a LAN network due to the fact that data is sent directly to a destination, but what about for a WLAN network? All packets can be seen if you are in promiscuous ...
- 518
0
votes
1
answer
185
views
Remote working. Is my employer able to monitor my activity
Due to situation, my employer made a work-from-home policy.
And remote administration tool is not installed, since I did clean installation of the system.
Is my employer able to see my activity?
...
- 8,833
2
votes
2
answers
9k
views
How can I sniff Telegram packets before they get encrypted?
How can I sniff packets that are being sent from my computer to their server and from their servers to me using a sniffing app like Wireshark?
Right now when I use Wireshark, they are all encrypted, ...
- 128k
5
votes
3
answers
3k
views
What are the advantages and disadvantages of using a HackRF One compared to specific protocol sniffers?
I am performing some research on IoT test tools and came across the HackRF One which can transmit and receive from 1 MHz to 6 GHz. I therefore think that it can analyze many protocols, but I cannot ...
- 34.1k
-1
votes
2
answers
750
views
Can Wireshark resolve https domain name?
Can I use Wireshark to see what websites are visited on my network? I'm just looking for the domain name, and not a full url or any credentials. Would I need any additional tools such as sslstrip to ...
- 12.7k
1
vote
1
answer
3k
views
Analyze / Sniff all packets from all devices connected to a router
First of all, before explaining what I'm trying to do, let me clarify that my intentions are not steal any information, as it's only for study purposes, not even for my own entertainment.
I'm trying ...
- 128k