Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [spoofing]

A kind of attack in which one system, program, or user successfully masquerades as another.

0
votes
0answers
21 views

Is this type of attack possible? [duplicate]

I'm wondering if it is possible for an attacker to spoof his IP address to look like mine. For example, in Facebook's connection logs, would it be possible for an attacker to log into my account while ...
0
votes
2answers
61 views

Websocket connection spoofing

I have a websocket server, where client credentials get validated upon connecting and are never bothered again, since connections are stored in memory. I was wondering, a TCP connection is basically ...
0
votes
0answers
31 views

Unable to join airbase-ng AP

In a test environment, I am trying to spoof my basic router's Wi-Fi access point using the following: Instructions: https://www.udemy.com/penetration-testing/learn/v4/t/lecture/2693224?start=0 USB Wi-...
0
votes
1answer
60 views

How to track anonomous SMS on your smartphone [duplicate]

I sometimes receive sms from unknown numbers asking me to send money on another unknown number. Is there a way to track the source of such numbers through logs or other technologies or solutions?
0
votes
0answers
53 views

How to trace spoofed phone numbers?

I keep getting scam calls using spoofed phone numbers. Is there a way for me to trace? I have contacted the authorities but they seem to be not as enthusiastic as I am about solving the issue.
-1
votes
1answer
41 views

Can I spoof a specific AP of a network?

My college wifi requires a certificate installation and also is very unreliable. Therefore, I prefer using my mobile data when I am on campus. But the college has its own app for attendance taking and ...
1
vote
1answer
71 views

ISP's defence methods against IPv6 Spoofing

I read about there being methods applied by ISP's to defend networks against IPv4 spoofing, but not too much about IPv6 spoofing. I'm wondering if someone has some knowledge if ISP's apply techniques ...
1
vote
1answer
129 views

Apple ID scam, gave control of my computer for a few minutes

I was called from what appears to be a legitimate apple phone number and I was told there was suspicious activity. Then I said I wanted to speak to someone and I was connected to a someone with an ...
1
vote
0answers
107 views

How to defend against adblock detection/adblock subscription leaks?

Is there a best practice (or useful extension) for defending against adblock fingerprinting techniques? I'm not asking about how to bypass adblock detection as such, but rather how one might appear ...
22
votes
6answers
7k views

How to be mean to some people that stole my phone [closed]

My iPhone was stolen a couple of weeks ago and I started receiving the following messages on my recovery secondary number that I provided with Find My iPhone: The URLs are: https://apple.inc-view.us/...
0
votes
1answer
113 views

How safe are free SSL - HTTPS cert (fake sites with HTTPS) [duplicate]

I recently heard from one of my friends that we can create our own SSL certificate. So IF I am going to create a fake SSL cert for a fake bank site, its going to auto get HTTPS and say secured in ...
7
votes
1answer
217 views

Do major ISPs still ignore IP spoofing?

I was reading this question: Why don't ISPs filter on source address to prevent spoofing? and based on those answers, ISPs ignore it because of the overhead of checking for spoofing. But that ...
0
votes
0answers
42 views

How did this “hacker” make it look like I sent the email to myself? [duplicate]

So I went through my junk today as I wasn't receiving a sign up email from a service I signed up to. Looking through and another email caught my eye. The email looks like it has come from my own ...
1
vote
2answers
152 views

Prevent Text Spoofing - Best methods

In an enterprise environment we have been inundated with spoof texts appearing to be from the corporate office. After much research it appears Verizon isn't able to assist. Just wondering if anyone ...
1
vote
3answers
146 views

is spoofing CA to sign application possible?

Is it possible to spoof the CA of any server to sign some application? As like as what CarbonCopy claims?
2
votes
1answer
63 views

Smartphone fingerprint plus iris scanning for login

I have often thought about the fact that when intimate relationship partners live together they eventually tend to sneak over your shoulder and gain access to your password on either your mobile phone ...
6
votes
1answer
157 views

How could malicious code changes in a GitHub pull request be masked by an attacker?

When viewing a pull request on GitHub (or the equivalent on any other platform), the web interface displays a diff of the changes for you to review. Reviewing the diff is obviously vulnerable to ...
1
vote
1answer
125 views

Help! Someone fake texted or made a photo with my number calling and texting them [closed]

My husband received a Facebook message from a random guy who’s profile we cannot find nor could we respond! It was this picture that I attached. He’s made a picture where it looks like my phone number ...
2
votes
0answers
26 views

DNS search lists cause ambiguity, but what are practical examples of this?

Browsers and other Web software tend to allow the system resolver to use the local domain search list when resolving URLs. E.g. www -> www.example.com., if your domain search list is example.com. ...
38
votes
4answers
6k views

How could a public DNS server return bad results?

I live in a country which is under many sanctions. Both internal sanctions (government on people) and external sanctions (US on our people). In our country, YouTube, Twitter, Facebook and many other ...
0
votes
1answer
135 views

Is it possible to make a spoofing attack in a access point with same SSID target network?

With an Evil Twin attack is it possible for the access point to send malware to connected devices? If it is, how can this be prevented?
2
votes
2answers
184 views

Is it safe to add IP address to SPF record

I am a programmer who manages online exchanges user also and i have been asked to add IP address to SPF record so that one of the application can hosted on Azure can send emails to user etc.. v=spf1 +...
3
votes
1answer
2k views

How to detect WiFi spoofing? [duplicate]

I have recently become concerned that someone might be spoofing the WiFi network at my office. The network has been really unstable these last few weeks. The password isn't really that secret, and I'm ...
0
votes
2answers
101 views

Message telling me that I bought something with credit card

I just received a message via SMS that I bought something from an online shop with my credit card. The message reads like this (translated from German): Your credit card purchase - please check: - ...
2
votes
2answers
1k views

OAuth - How does the Resource Server validate the access token is not for any other Resource Server?

Let's take an example where there are two resource servers - RS1 and RS2 and there is one authorization server - AS. Both resource servers - RS1 and RS2 use authorization server - AS If a client ...
2
votes
0answers
287 views

Fake lock screen in full screen browser window

Suppose a desktop OS has a lock screen and fades and locks after inactivity. Suppose the default appearance and inactivity duration are well known (eg consider a default installation of some popular ...
1
vote
0answers
99 views

Firefox directs me to strange chinese error page, is my security compromised?

Today I was working on a project on my localhost ( I'm a web developer ), when I noticed Firefox is showing a message that means I need to login to my ISP before I can start browsing ( The ...
1
vote
1answer
120 views

How does faked DNS manage to downgrade preloaded HSTS?

Yesterday, in a bid to entertain myself for a while, I was playing around with DNS servers. I set up a DNS server locally, which I then set as my primary DNS server. Within it, I added some records ...
0
votes
0answers
313 views

Fake Wordpress reset password email with an external X-Google-Original-From header

My employer owns a Wordpress blog and I have an account with it used to submit blog posts. I have recently received a few password reset emails that link to an external site. These emails appear to ...
22
votes
4answers
572 views

Bank asked for a cross login?

I was creating a new bank account here in the US at HSBC's popular online bank... You know the step where you have to verify the account you're sending from, by receiving two small test payments? I ...
0
votes
1answer
1k views

dnsspoof doesn't spoof DNS request with IP-address of local machine

I want to spoof all DNS requests with the IP address of my local machine. However, running dnsspoof, all clients receive the real IP address and not the fake IP address of my host. I know I can ...
81
votes
1answer
23k views

Is Starbucks spoofing me?

When I connected to Starbucks's Wi-Fi, I got a security alert from MS Outlook that looks like this: I looked up secure.datavalet.io, but there's no mention of this thing anywhere. This does not ...
0
votes
0answers
287 views

Kali Linux 2 DNS spoofing: is there still a bug?

Good evening, I am trying to set up dns spoofing in kali linux 2.1 I have two kali environments, one on my tablet using linux deploy, and another on an USB stick. I managed to poison ARP using ...
0
votes
1answer
361 views

Is IP spoofing possible in Windows Desktop with user privileges?

I read on WinSockAPI that IP spoofing is disabled for Desktop windows devices (non-servers like Windows 7, etc). However, I've been able to do IP spoofing using nmap, so clearly this is possible. ...
3
votes
4answers
534 views

I started to learn about MITM attacks, and I can't figure out few things

I just started to learn about MITM attacks, and I can't figure out few things. I have few questions and appreciate all the answers. If the attacker is already in my LAN why does he need to trp to arp ...
0
votes
1answer
154 views

Spoofed number? [duplicate]

I got an offensive text message from a phone number I don't recognize. I looked up the number with reverse look up. It says the number is a land line. Have I been "spoofed"? Is there a way to find out ...
1
vote
1answer
92 views

APIPA traffic in router/netflow logs

While inspecting some flow logs, I noticed some port 22 traffic destined to a few local servers (at 10.x.x.x) . What was surprising is that the traffic originated from a 169.254.x.x IP address. Is ...
1
vote
1answer
244 views

MITM based on ARP spoofing

I fail to understand how a MITM attack sniffs packets and modifies them.In the case of ARP spoofing although the attacker has spoofed the MAC address of a host, how does he modify it? if he listen to ...
25
votes
2answers
5k views

How wise is it to use a tool for portspoofing at your server to confuse attackers?

I came across this tool recently https://github.com/drk1wi/portspoof How efficient will it be to use it to confuse hackers doing port scanning? If it's actually going to be pretty efficient, why ...
1
vote
2answers
2k views

Can I spoof my user agent so that the type of device I'm using doesn't show up?

I was looking into spoofing a user agent but all that has come up so far is spoofing the browser type. However I can still see what kind of device I am using (tbh I'm not really even sure why someone ...
0
votes
1answer
42 views

Is it possible for a single user to route connections through several IP addresses?

I have searched google for an answer to my question and can’t seem to find one. Maybe you can help me out. Is it possible to use somebody else’s IP addresses to post on a forum with? I am a moderator ...
1
vote
1answer
4k views

Reply to a spoofed SMS message

If my phone number is (212)555-1212 and Bob spoofs my number vias SMS to Alice, will Alice's reply be sent to Bob, me or both? EDIT: The concern is that the spoof prompts Alice to disclose ...
0
votes
1answer
68 views

Shmishing scam that targets Gmail access

I'm looking for information on scams that target GMail users. I believe I found an article that discusses the attack in the context of bank fraud at Warning over text message scam that allowed '...
0
votes
3answers
152 views

Can a malicious SSH server successfully *pretend* to know a client's public key?

Yes, I know that after giving an SSH public key to someone else, one should always assume that it might have been swiftly published somewhere. (For instance, give your SSH public key to GitHub, and ...
1
vote
1answer
2k views

It's there a way to bypass https nowadays?

It's there a way to bypass https (using mitm attacks) on browsers like chrome, firefox, etc? I know it could be done in some way, exploiting the NTP port, but we need the interaction of the victim. ...
3
votes
2answers
135 views

How can an end-user verify the authenticity of a third-party authentication provider's login form

Given the ubiquitous use of third party authentication providers in web apps today, how can end-users verify the authenticity of the login forms that collect their credentials? What's to stop a ...
0
votes
1answer
667 views

Tracing email sent from service?

I know an email was sent using the online service emkei.cz. Is there a way to find out who used that service to send the specific email I received?
2
votes
2answers
330 views

Protecting yourself from DNS spoof

How does one protect themself from a DNS compromised site, which also has had their SSL private key stolen? Short of monitoring which IP the packets are being sent to. Edit: Or even without the ...
5
votes
1answer
138 views

Is it worth verifying the request hostname in API-to-API communications?

When authenticating from a browser application to an API layer, you can verify the request origin for CORS requests. I'm aware that this is primarily to prevent CSRF attacks. It doesn't prevent an ...
13
votes
1answer
953 views

Did somebody try to spoof my wifi network?

I am traveling on a train in Switzerland, working on a macbook connected to a wifi hotspot that I've set up on my Phone [1] using WPA2. At some point along the journey, the internet connection drops. ...