Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [spoofing]

A kind of attack in which one system, program, or user successfully masquerades as another.

1
vote
1answer
71 views

MAC Spoofing - Keep victim out

I have successfully done a MAC Spoofing Attack on my open (ad-hoc) network using the macchanger tool (OS: Kali linux). I would like to know what are the common techniques to keep the connection alive ...
0
votes
0answers
40 views

Problems relaying NTLMv2 with Responder and MultiRelay

I'm currently experimenting with mitm relay attacks using Responder.py and MultiRelay.py tool and running into problems. I have the following LAB setup: Kali Box: IP: 192.168.1.13 ...
1
vote
0answers
61 views

What information for identification does a WiFi router get from a connecting device (Android)? What information can be spoofed?

When I want my device to connect to a WiFi router and make the router not recognize the device I have to change the MAC and the hostname. Is this right? And what information will also be usually ...
-1
votes
0answers
31 views

STRIDE in context of replay attacks

I'm trying to map the threat catalog released by the BSI (german information security department) to the STRIDE methodology. How could replay attacks fit into the model? In the CIA goals model I ...
5
votes
3answers
198 views

What if the Google account login screen is spoofed [duplicate]

I am talking about the apps that allow using my google account for login. Nothing against Postman, just using its login screen for example - My concern is that an app could be spoofing this whole ...
0
votes
1answer
70 views

How can Ettercap act as a client instead of a gateway?

I am trying to execute an attack that requires a full-duplex MiTM position. This is the reason why I choose to use Ettercap. I have picked DHCP spoofing as the attack of choice. The problem that I ...
1
vote
0answers
109 views

Strange inbound MMS messages

We received some strange inbound MMS messages on our Twilio account today. Our account was not compromised, as there are no suspicious outbound messages sent from our number via Twilio. We first ...
0
votes
0answers
17 views

Connect to amazon rds SQL server through spoofed ip address [duplicate]

I'm using amazon MySQL server and grant only my server IP to connect to the database, the question is can someone else access to the database through spoofed IP address and MySQL server credentials?
3
votes
2answers
158 views

How can GNSS spoofing be so easy? Don't the satellites sign their messages?

BBC News reports that a new study accuses Russia of massive GPS spoofing (see also this linked blog article). I am surprised that this is so easy¹, in particular since GPS originates as a military ...
1
vote
2answers
79 views

SPF, DKIM and DMARC - How do receiving/recipient mail servers know how and when to validate the mail?

I have spent a bit of time researching SPF, DKIM and DMARC mechanisms however If I understand correctly, these help the recipient to confirm whether the domain is legitimate but only if they have ...
9
votes
4answers
3k views

Spam email “via” my domain, but SPF record exists

I just got an email from some random person's name "via" info@mydomain.com, although info@mydomain.com is just a distribution group within G Suite. We have an up-to-date SPF record added from Google, ...
0
votes
0answers
23 views

anti-spoofing measures for SAQ C business with iPads/NCR silver

So I'm just wondering what types of anti-spoofing measures a SAQ-C business would need: https://www.pcisecuritystandards.org/documents/PCI-DSS-v3_2_1-SAQ-D_Merchant.pdf There's a lot of built in ...
0
votes
0answers
21 views

Is this type of attack possible? [duplicate]

I'm wondering if it is possible for an attacker to spoof his IP address to look like mine. For example, in Facebook's connection logs, would it be possible for an attacker to log into my account while ...
0
votes
2answers
115 views

Websocket connection spoofing

I have a websocket server, where client credentials get validated upon connecting and are never bothered again, since connections are stored in memory. I was wondering, a TCP connection is basically ...
0
votes
0answers
64 views

Unable to join airbase-ng AP

In a test environment, I am trying to spoof my basic router's Wi-Fi access point using the following: Instructions: https://www.udemy.com/penetration-testing/learn/v4/t/lecture/2693224?start=0 USB Wi-...
0
votes
1answer
70 views

How to track anonomous SMS on your smartphone [duplicate]

I sometimes receive sms from unknown numbers asking me to send money on another unknown number. Is there a way to track the source of such numbers through logs or other technologies or solutions?
0
votes
0answers
188 views

How to trace spoofed phone numbers?

I keep getting scam calls using spoofed phone numbers. Is there a way for me to trace? I have contacted the authorities but they seem to be not as enthusiastic as I am about solving the issue.
-1
votes
1answer
50 views

Can I spoof a specific AP of a network?

My college wifi requires a certificate installation and also is very unreliable. Therefore, I prefer using my mobile data when I am on campus. But the college has its own app for attendance taking and ...
1
vote
1answer
104 views

ISP's defence methods against IPv6 Spoofing

I read about there being methods applied by ISP's to defend networks against IPv4 spoofing, but not too much about IPv6 spoofing. I'm wondering if someone has some knowledge if ISP's apply techniques ...
1
vote
1answer
136 views

Apple ID scam, gave control of my computer for a few minutes

I was called from what appears to be a legitimate apple phone number and I was told there was suspicious activity. Then I said I wanted to speak to someone and I was connected to a someone with an ...
1
vote
0answers
127 views

How to defend against adblock detection/adblock subscription leaks?

Is there a best practice (or useful extension) for defending against adblock fingerprinting techniques? I'm not asking about how to bypass adblock detection as such, but rather how one might appear ...
22
votes
6answers
7k views

How to be mean to some people that stole my phone [closed]

My iPhone was stolen a couple of weeks ago and I started receiving the following messages on my recovery secondary number that I provided with Find My iPhone: The URLs are: https://apple.inc-view.us/...
0
votes
1answer
195 views

How safe are free SSL - HTTPS cert (fake sites with HTTPS) [duplicate]

I recently heard from one of my friends that we can create our own SSL certificate. So IF I am going to create a fake SSL cert for a fake bank site, its going to auto get HTTPS and say secured in ...
7
votes
1answer
246 views

Do major ISPs still ignore IP spoofing?

I was reading this question: Why don't ISPs filter on source address to prevent spoofing? and based on those answers, ISPs ignore it because of the overhead of checking for spoofing. But that ...
0
votes
0answers
54 views

How did this “hacker” make it look like I sent the email to myself? [duplicate]

So I went through my junk today as I wasn't receiving a sign up email from a service I signed up to. Looking through and another email caught my eye. The email looks like it has come from my own ...
1
vote
2answers
266 views

Prevent Text Spoofing - Best methods

In an enterprise environment we have been inundated with spoof texts appearing to be from the corporate office. After much research it appears Verizon isn't able to assist. Just wondering if anyone ...
1
vote
3answers
191 views

is spoofing CA to sign application possible?

Is it possible to spoof the CA of any server to sign some application? As like as what CarbonCopy claims?
2
votes
1answer
104 views

Smartphone fingerprint plus iris scanning for login

I have often thought about the fact that when intimate relationship partners live together they eventually tend to sneak over your shoulder and gain access to your password on either your mobile phone ...
6
votes
1answer
279 views

How could malicious code changes in a GitHub pull request be masked by an attacker?

When viewing a pull request on GitHub (or the equivalent on any other platform), the web interface displays a diff of the changes for you to review. Reviewing the diff is obviously vulnerable to ...
1
vote
1answer
144 views

Help! Someone fake texted or made a photo with my number calling and texting them [closed]

My husband received a Facebook message from a random guy who’s profile we cannot find nor could we respond! It was this picture that I attached. He’s made a picture where it looks like my phone number ...
2
votes
0answers
26 views

DNS search lists cause ambiguity, but what are practical examples of this?

Browsers and other Web software tend to allow the system resolver to use the local domain search list when resolving URLs. E.g. www -> www.example.com., if your domain search list is example.com. ...
38
votes
4answers
6k views

How could a public DNS server return bad results?

I live in a country which is under many sanctions. Both internal sanctions (government on people) and external sanctions (US on our people). In our country, YouTube, Twitter, Facebook and many other ...
0
votes
1answer
166 views

Is it possible to make a spoofing attack in a access point with same SSID target network?

With an Evil Twin attack is it possible for the access point to send malware to connected devices? If it is, how can this be prevented?
2
votes
2answers
250 views

Is it safe to add IP address to SPF record

I am a programmer who manages online exchanges user also and i have been asked to add IP address to SPF record so that one of the application can hosted on Azure can send emails to user etc.. v=spf1 +...
3
votes
1answer
3k views

How to detect WiFi spoofing? [duplicate]

I have recently become concerned that someone might be spoofing the WiFi network at my office. The network has been really unstable these last few weeks. The password isn't really that secret, and I'm ...
0
votes
2answers
110 views

Message telling me that I bought something with credit card

I just received a message via SMS that I bought something from an online shop with my credit card. The message reads like this (translated from German): Your credit card purchase - please check: - ...
2
votes
2answers
2k views

OAuth - How does the Resource Server validate the access token is not for any other Resource Server?

Let's take an example where there are two resource servers - RS1 and RS2 and there is one authorization server - AS. Both resource servers - RS1 and RS2 use authorization server - AS If a client ...
2
votes
0answers
355 views

Fake lock screen in full screen browser window

Suppose a desktop OS has a lock screen and fades and locks after inactivity. Suppose the default appearance and inactivity duration are well known (eg consider a default installation of some popular ...
1
vote
0answers
102 views

Firefox directs me to strange chinese error page, is my security compromised?

Today I was working on a project on my localhost ( I'm a web developer ), when I noticed Firefox is showing a message that means I need to login to my ISP before I can start browsing ( The ...
1
vote
1answer
154 views

How does faked DNS manage to downgrade preloaded HSTS?

Yesterday, in a bid to entertain myself for a while, I was playing around with DNS servers. I set up a DNS server locally, which I then set as my primary DNS server. Within it, I added some records ...
0
votes
0answers
370 views

Fake Wordpress reset password email with an external X-Google-Original-From header

My employer owns a Wordpress blog and I have an account with it used to submit blog posts. I have recently received a few password reset emails that link to an external site. These emails appear to ...
22
votes
4answers
587 views

Bank asked for a cross login?

I was creating a new bank account here in the US at HSBC's popular online bank... You know the step where you have to verify the account you're sending from, by receiving two small test payments? I ...
0
votes
1answer
2k views

dnsspoof doesn't spoof DNS request with IP-address of local machine

I want to spoof all DNS requests with the IP address of my local machine. However, running dnsspoof, all clients receive the real IP address and not the fake IP address of my host. I know I can ...
81
votes
1answer
23k views

Is Starbucks spoofing me?

When I connected to Starbucks's Wi-Fi, I got a security alert from MS Outlook that looks like this: I looked up secure.datavalet.io, but there's no mention of this thing anywhere. This does not ...
0
votes
1answer
460 views

Is IP spoofing possible in Windows Desktop with user privileges?

I read on WinSockAPI that IP spoofing is disabled for Desktop windows devices (non-servers like Windows 7, etc). However, I've been able to do IP spoofing using nmap, so clearly this is possible. ...
3
votes
4answers
618 views

I started to learn about MITM attacks, and I can't figure out few things

I just started to learn about MITM attacks, and I can't figure out few things. I have few questions and appreciate all the answers. If the attacker is already in my LAN why does he need to trp to arp ...
0
votes
1answer
164 views

Spoofed number? [duplicate]

I got an offensive text message from a phone number I don't recognize. I looked up the number with reverse look up. It says the number is a land line. Have I been "spoofed"? Is there a way to find out ...
1
vote
1answer
104 views

APIPA traffic in router/netflow logs

While inspecting some flow logs, I noticed some port 22 traffic destined to a few local servers (at 10.x.x.x) . What was surprising is that the traffic originated from a 169.254.x.x IP address. Is ...
1
vote
1answer
257 views

MITM based on ARP spoofing

I fail to understand how a MITM attack sniffs packets and modifies them.In the case of ARP spoofing although the attacker has spoofed the MAC address of a host, how does he modify it? if he listen to ...
25
votes
2answers
5k views

How wise is it to use a tool for portspoofing at your server to confuse attackers?

I came across this tool recently https://github.com/drk1wi/portspoof How efficient will it be to use it to confuse hackers doing port scanning? If it's actually going to be pretty efficient, why ...