Questions tagged [sniffing]
A sniffer is a program that monitors and analyzes network traffic.
176
questions
24
votes
3
answers
7k
views
How to deal with WPE users
I own a chat room and some users use a program Winsock Packet Editor, "WPE PRO".
With it they manage to bypass chat rules, like they can't be muted or kicked, and they can send messages fast ...
- 381
0
votes
3
answers
1k
views
How to capture Wifi 802.11 traffic?
I want to capture the wifi traffic from my wireless card, so what i have to do and are there tools for that? I know that there is aircrack-ng and airodump, but these tools need a extra wireless ...
- 189
6
votes
2
answers
2k
views
Server-side man-in-the-middle/eavesdropping: attacks between two servers using unencrypted HTTP
I’m new to security, and I’m wondering how man-in-the-middle and eavesdropping attacks between web servers work, rather than between personal devices and servers.
Most questions I see here about man-...
- 105
0
votes
2
answers
480
views
Sniff Wi-Fi network traffic
With Airodump I can see Wi-Fi networks and clients associated to them. I know password to this Wi-Fi networks. Is it possible to dump encrypted traffic between AP and client (WPA2) and then decrypt it ...
- 101
3
votes
1
answer
523
views
Detecting unusual network activity
I have a small business network consisting of ca. 15 devices, a few switches and a two routers. Recently it occurred to me that all the security measures I have been doing are not very productive: I ...
- 133
0
votes
2
answers
1k
views
What is really wireless sniffing, and how can this attack damage someone
I guess that this is a dumb question, but i really thought for a longtime that the wireless sniffing attack consists of listening to all the packets that get over the air, but apparently it isn't that,...
- 679
1
vote
2
answers
2k
views
Is there a way to uniquely identify a mobile device through packet sniffing?
I need to uniquely identify a mobile device using the "ping" packets that it transmits to cellular towers regularly, in an area of interest by installing a packet sniffer at that location? I only need ...
- 11
-3
votes
1
answer
569
views
Sniffing or DOS attacks or MIM Attack [closed]
i'm preparing my bachelor's degree, i have to chose an attack, sniffing, dos, or MIM attack, I'm a bit lost, in my project i have to find a solution, how to detect one of this attacks, If you guys may ...
- 11
1
vote
2
answers
731
views
sniffing with wireshark on wireless network
In a wireless network, does wireshark sniffs all the packets that are in move, or only packets whom we are the destination/source ?
If it sniffs all the packets in the air, can someone explain or ...
- 679
12
votes
4
answers
5k
views
Can someone use WiFi snooping to see data I send through Tor Browser when I'm not using SSL?
(NOTE: I've read other similar questions, but I'm not at all certain about this, therefore I'm asking.)
I travel a lot, and I generally use public WiFi spots and hotels/hostels/boarding houses etc. ...
- 121
1
vote
2
answers
1k
views
is the evil twin attack considered sniffing?
Is the evil twin attack included in the sniffing category ?
I am really confused and i can't tell if it is.
- 679
0
votes
1
answer
80
views
Would a recording of a complete GSM session provide a proof of authenticity?
Hypothetical question: suppose I had a OsmocomBB phone modified to record all transmission done over GSM including encryption keys used during the communication. If I made a call and recorded all data ...
- 6,534
4
votes
1
answer
5k
views
How can I exploit a web application if content sniffing is not disabled?
I just come across one of the customer's website for penetration testing having JSON callback reflecting the user input in the response body.
like this:
https://example.com/somepage?callback=<...
- 313
3
votes
1
answer
2k
views
Securely read encryption key from NVRAM of TPM 1.2
I have configured a disk encryption in linux using LUKS with TPM with secure boot.
The encryption key is loaded from TPM from NV memory using command TPM_NV_ReadValueAuth.
The problem is that it is ...
- 1,119
9
votes
1
answer
1k
views
Hacking/Sniffing/recording GSM like Karsten Nohl
For a course at college, I wanted to reproduce the attack on GSM shown in this video by Karsten Nohl: https://www.youtube.com/watch?v=0hjn-BP8nro.
From what I understand he used an USRP radio to ...
- 91
5
votes
1
answer
1k
views
ARP poison on divided network (every PC in it's own subnet)
Let's say that we have a room with a router and 30 PC's plugged in. Every PC has it's own 'subnet'. If we check for available hosts via ettercap/wireshark (on any PC), it only discoveres two hosts: ...
- 61
27
votes
3
answers
7k
views
Firebug appears to be decrypting SSL traffic: is it the correct behaviour?
In my company we were writing a small web application which would be hosted and tested under HSTS protocol.
One of my tester complained that the username and password can be seen in cleartext so it ...
- 5,107
1
vote
0
answers
224
views
Decrypting WLAN (WPA2) Traffic - What kind of Antenna to use?
In a Penetration test after receiving the PSK of a WPA2 WLAN it's possible to decrypt the wireless traffic using airdecap-ng for example. This works well as long as one recorded the associated four-...
- 4,313
3
votes
1
answer
2k
views
Can't decrypt captured HTTP connection from WPA Network
Hi I am attempting to sniff HTTP packet traffic using Wireshark on Kali Linux. I have added my wpa-pwd correctly to the IEEE 802.11 protocol and enabled "decryption".
Currently I can only view the ...
- 33
-1
votes
1
answer
1k
views
Are Apple Airport routers really more secure than other routers?
I'm asking because I just got the Airport Extreme because I read that it is one of the few routers out there that does not come with a built-in WPS switch. While this provides some comfort, does it ...
- 129
2
votes
1
answer
2k
views
Capturing (1x Only) HTTP POST Request [tcpdump]
Every now and then;
I like to fire up tcpdump and just watch the network traffic as the packets flow on by.
For example:
user@host:~$ sudo tcpdump -Aevvv
Will parse & print all local ...
- 1,769
3
votes
2
answers
4k
views
How to intercepting iOS HTTPS traffic
How can I intercept & parse through the SSL traffic (incoming & outgoing) generated by my iPad application?
- 1,769
2
votes
1
answer
806
views
Sniff LAN SSL requests
When I log in into Facebook, using Wireshark in the same machine, I can read the request data in plain-text.
That doesn't happen when I'm sniffing my LAN: I can read the SSL packets but they are ...
- 21
0
votes
2
answers
623
views
Could anyone technically see my requests with TOR if the person has access to my router?
I was wondering if someone could sniff the packets I send via my computer with something like Wireshark I guess even if I use TOR and the person could access the router like stated.
- 9
5
votes
1
answer
277
views
Are there any products/techniques for low-effort DSL sniffing?
Inspired by the "can my neighbour listen to my phonecalls" question, I'd like to ask what would be required for an attacker to snoop on an ADSL connection given physical access to the wire (so, "...
- 827
51
votes
2
answers
74k
views
Why is it possible to sniff an HTTPS / SSL request?
I'm new to the realm of HTTP requests and security and all that good stuff, but from what I've read, if you want your requests and responses encrypted, use HTTPS and SSL, and you'll be good. Someone ...
- 611