Questions tagged [sniffing]
A sniffer is a program that monitors and analyzes network traffic.
176
questions
1
vote
1
answer
3k
views
Sniffing ldap credentials?
I am going to performing an internal pentest. Is it possible to sniff active directory credentials using Wireshark or Ettercap when a user logs on and authenticates to using their domain credentials?
- 7
3
votes
1
answer
1k
views
Is a Captive Portal Wifi AP as insecure as an open unencrypted Wifi?
As far as I understand, the captive portal is implemented by some sort of iptable firewall rules. Since there is no handshake established during the initial association with the AP(As no passphrase is ...
- 439
0
votes
0
answers
384
views
How feasible would it be to sniff traffic between an Authentication Server and a RADIUS server in a corporate setting?
For WPA enterprise in the corporate world, is the RADIUS server connected to the Authenticator/Access Point wirelessly or 'wiredly' for most situations? If they are connected wirelessly, does this ...
- 439
2
votes
2
answers
4k
views
Is is possible to decrypt 802.11 for WPA enterprise?
So it is fairly trivial to decrypt 802.11 for WPA-PSK as explained in this link https://wiki.wireshark.org/HowToDecrypt802.11. Is it then possible to decrypt the same way for WPA enterprise?(Assuming ...
- 439
0
votes
1
answer
1k
views
Sniffing the whole traffic within a network range
How is it possible to sniff the whole traffic within a network range even if it's beyond your subnet scope?
For instance, consider your machine having the IP address of 172.16.96.25, but you need to ...
- 246
0
votes
3
answers
1k
views
Best options for SSL inspection while maintaining Perfect Forward Secrecy
We are looking to monitor inbound HTTPS connections for performance issues as well as errors. HTTP requests we are able to gather this information just fine, but we don't have a way to do this while ...
0
votes
1
answer
314
views
Which chain of the iptables receives the sniffed packets
Host C is using wireshark to sniff packets from Host A to Host B. I am able to see those packets from wireshark but I am not able to find them in the PREROUTING chain of iptables. When Host C ...
- 439
0
votes
0
answers
29
views
Invisible SSL sniffing [duplicate]
My question is pretty brief: may I accomplish invisible sniffing of secure traffic with(HTTPS) via sniffer, using my own certificate but signed by some commonly known CA(like verisign or smth like ...
- 154
4
votes
1
answer
157
views
Would it be possible for an ISP to guess specific requests on an HTTPS site using package size? [duplicate]
In light of the recent senate decision in the US to allow ISPs to sell users' browsing history, I've been reading of recommendations on how users can retain their privacy. One of the common ...
- 204
1
vote
2
answers
663
views
Wireshark / TCPdump captures only part of HTTP request packets
I wanted to do some in-house research and check how many and what kind of packets I can capture from/to my in-house open Wi-Fi router.
I had Kali Linux installed on Windows 10 machine (Virtualbox) ...
6
votes
2
answers
2k
views
Sniffing unencrypted traffic in datacenter
Please explain how is it possible to sniff packets from within the datacenter.
Some background. I am studying networking options for DigitalOcean. My goal is to make sure that data exchange between ...
- 163
2
votes
1
answer
1k
views
Sniff API request through proxy
I have an iOS application that consumes an API. That application sucks so I was trying to "discover" that API and make my own application consuming that API.
The issue is that the API is under SSL/...
- 21
1
vote
2
answers
697
views
Sniffing the data around me
Scenario:
no router, just a laptop network card turned in monitor mode.
(imagine you are in the bus or train)
In this scenario can I see all the data that is going through air around me?
Can I ...
- 113
0
votes
1
answer
274
views
Is it possible to analyze real Single Sign-On (SSO) messages via network sniffing?
I am thinking how to gain and analyze the information in the real SSO (request/response) messages, for some commercial SSO solutions.
The challenge is that most commercial SSO solutions are black-box ...
- 838
2
votes
1
answer
4k
views
What does SSI signal does mean in captured packets in wireshark?
In the packet captured below, captured by wireshark
does the SSI Signal in dBm represents the power at which the sniffing network adapter (say USB network adapter wlan1 on Raspberry Pi3) received ...
- 145
0
votes
1
answer
336
views
Sniff packets of a remote network [duplicate]
Is it possible to sniff some packets from a friend network from my network?
If it's possible, how?
2
votes
1
answer
1k
views
blackbox pentest newbie - find valid internal IP adress from unknown range
I`m a beginner and would like to know, how can you find a valid IP adress to start your scan, if all you have is the LAN cable....nothing more.
No DHCP is enabled.
Any hints or clues on how to figure ...
- 23
6
votes
1
answer
4k
views
Sniffing WhatsApp Traffic
I was wondering if its possible to obtain private keys for Whatsapp to be able to sniff traffic between two WhatsApp Android devices (both under my control). I understand that WhatsApp traffic is now ...
- 257
2
votes
0
answers
386
views
What are your favorite BLE (Bluetooth Low Energy) sniffing tools? (Hardware and Software) [closed]
I will soon need to debug BLE communication for a newly developed BLE device.
What are your favorite BLE (Bluetooth Low Energy) sniffing tools? (Hardware and Software)
- 581
-4
votes
3
answers
180
views
Capturing password typed in webpage - HTML replace [closed]
For a while I've been documenting some exploits (I was afraid about man-in-the-middle) and an idea came into my mind.
When a user makes a request to a server, the browser might try to use http ...
5
votes
2
answers
410
views
Why isn't a standard for encrypted but open WiFi developed?
With passwordless public WiFi hotspots, it's easy to demonstrate that packets can be sniffed and (in the case of non-HTTPS traffic) private information gained. While the long-term solution would be to ...
- 161
14
votes
6
answers
4k
views
How can a user defend against session hijacking?
Given a website with various security flaws, one of them is session hijacking, session token continuously being sent as an argument over unsecured HTTP. In my field it's not surprising that others ...
- 2,154
2
votes
1
answer
2k
views
How can you sniff packets from a switch?
For example, if you are using wireshark and you have the NIC set on promiscious mode, will this only allow you to sniff on packets wirelessy from a hub? Because a hub sends data on all ports.
- 51
5
votes
3
answers
4k
views
Why aren't TCP sockets encrypted by default?
I've been wondering this for as long as I've been programming, Why aren't TCP sockets encrypted by default? Everyone always says that using raw sockets is dangerous as all packets sent are susceptible ...
- 882
0
votes
1
answer
1k
views
Can someone obtain URL (or just domain name) by using IP destination address of a packet even when HTTPS is used [duplicate]
When we sniffing with, lets say ettercap, we receive all packets from victim, and with that we can see Destination IP address from particular packet. So, can we obtain the domain name from that IP ...
- 3
2
votes
1
answer
359
views
Is sniffing HTTPS data useful? [closed]
Now I have some sniffed HTTPS traffic, What on earth can I do with it. More specifically, is there any way I can decrypt it or understand it, any tool on kali or something? I am a bit new to the ...
- 139
4
votes
0
answers
131
views
Can I detect unique identifiers from random radio chatter?
I am trying to find out if I can uniquely identify smartphones (I would like to find constant identifiers such as IMEI) by passively sniffing the cellular data frequencies.
I know that sensitive data ...
- 565
3
votes
2
answers
674
views
Counter measures against traffic sniffing inside a LAN
Here's the problematic I'm stuck with, in the next months I'm going to move in, in a little house in France. For the network connectivity the house owner decides to buy a single internet connection.
...
- 41
3
votes
4
answers
2k
views
Can I set up a 3g/4g Connection Proxy for Table/Phone App Pen Testing?
I would like to set up a testing environment for smartphone and tablet apps that can intercept 3g/4g communications and provide a traffic dump. I'd like to see all the 3g/4g traffic coming from, or ...
- 1,844
1
vote
3
answers
645
views
Are wireless card skimmers just fearmongering?
I'm not sure about other countries but Australian Banks have been releasing cards with RFID Chips in them (for what reason is beyond me since around the same time there's been payway apps which swap ...
- 113
3
votes
1
answer
2k
views
How to redirect someone packets connected over the same wifi into my computer using Wireshark? [closed]
I am using Windows 10. I just installed Wireshark 2.2.1. I am connected over a wifi network with security type WPA2-Personal. Many people are connected on this same network.
I have the password of ...
- 31
0
votes
0
answers
95
views
How to capture data and answer with simulated data?
I use Wireshark and other relatively smaller sniffers to make some tests.
I share my internet to my second PC. However, I have to spend much time for the following task, and want to know if i can do ...
- 2,727
2
votes
3
answers
289
views
Who can sniff my packets?
If I make a call to some server who can sniff my packets?
Obviously anyone who is on my network can sniff, but on the server side also?
My call will make several hops to the destination server, can ...
- 21
4
votes
3
answers
338
views
I just found out I have unknowingly been sending a password not using SSL, how likely is it that I have been compromised?
I just realized that I have been connecting (sending user name and password) to my production MongoDB database for several weeks using MongoChef (a database GUI) without the SSL option enabled. I ...
- 43
1
vote
0
answers
892
views
Decrypting a TLS/SSL traffic with Wireshark
I am trying to decrypt a TOLS/SSL traffic with Wireshark. When I start the sniffer I do get some packets with TLSv1.2 protocols but I can't decrypt them. Have seen this post, but the tutorial provided ...
- 11
2
votes
1
answer
2k
views
Sniffing TLS/SSL communication with Wireshark, possible? [duplicate]
I am trying to snif a SSL/TLS communication and thought about doing it with Wireshark. I've tried to do it and sniffed some with TLSv1.2 protocols, is that the communication? If so, how do I identify ...
- 21
0
votes
0
answers
21
views
What are the security risks of making an app closed-source? [duplicate]
What are the security risks, if any, of making an app closed-source vs. open-source?
- 1,716
2
votes
1
answer
2k
views
Is it possible to sniff windows smb logons and are they encrypted?
Since tools like Cain and Abel can sniff clear text passwords off most HTML pages, is it possible to configure the sniffing of clear text windows smb logons? I tried searching it up but the best thing ...
user121125
0
votes
2
answers
2k
views
What vulnerabilities are there for a website that does not use SSL for a login page (or any pages)
I see many websites that do not implement SSL either when logging in or at all. I know that you can simply sniff traffic on those sites and therefore see the user/pass in plaintext but what other ...
- 67
5
votes
1
answer
2k
views
Unable to obtain TCP/HTTP traffic from WPA2 packets even with full handshake and decryption
The Problem
On my WPA2 network, I have been successfully able to get intercept a full four-message EAPOL handshake from a particular computer on my network. It is my understanding that with this ...
- 235
3
votes
2
answers
1k
views
How to identify L2 devices in a Wide Area Network?
This is sample of a traceroute to google.com:
TraceRoute from Network-Tools.com to 216.58.194.46 [google.com]
Hop (ms) (ms) (ms) IP Address Host name
1 0 0 0 ...
- 1,627
3
votes
1
answer
2k
views
Network packet obfuscation
Suppose I am wirelessly transmitting network traffic between a computer and a router. As I understand it, even though the traffic is encrypted, it is possible for a third party attacker to intercept ...
- 133
3
votes
3
answers
4k
views
How to sniff 802.11 packets without going into monitor mode?
Is it possible to sniff or capture 802.11 packets which sends my computer to the router (AP). I know that I can't sniff packets which have a other destination MAC address without going into monitor ...
- 159
1
vote
2
answers
759
views
Cannot capture frames other than broadcast or multicast in Wireshark
My problem is that I cannot capture any frames other than broadcast or multicast over Wireshark on my WLAN interface (eg. no ICMP packets, no HTTP packets, etc.)
Please follow details below:
OS: ...
8
votes
2
answers
12k
views
Is promiscuous mode sufficient to sniff packets in a wifi network?
I'm connected to my WiFi network and I want to capture and analyze packets that other clients are exchanging with the gateway. I don't want to modify the content of these packets and I don't need to ...
user113574
0
votes
4
answers
854
views
Human readable SSL/TLS packets
If I have a protocol-analyzer/packet-sniffer, such as wireshark installed on a particular device..
(or in this case; tcpdump & tshark etc. on my smartphone..)
..should I be able to read ...
- 1,769
1
vote
1
answer
937
views
Is authorisation of FTP safe against sniffing and vulnerable to man-in-the-middle hijacking?
One of my hosting providers still just offers FTP access to the server...
Is authorisation safe (i.e. resistant to network sniffing) despite the content of the transmission is plain text?
Is it ...
1
vote
0
answers
265
views
USB TEMPEST attacks: viable range?
Is there any published research into the viability of reading Universal Serial Bus signals at a distance from the connection, using electromagnetic radiation emitted from the bus?
If not, what is the ...
- 2,031
3
votes
1
answer
15k
views
Google Drive photo security and publicly visible lh*.googleusercontent.com
I thought Google Drive was more secure than this.
If I upload a photo to Google Drive, I don't care that it's entrusted to them and I also assume someone working there can look at it. No big deal. ...
- 133
0
votes
1
answer
418
views
Encrypted traffic analysis
If i tunnel any tcp traffic true ssh or any ssl encrypted protocol will some one capturing the traffic capable of do some kind of offline decrypting using the capture file ?? What technic they use to ...
- 321