Questions tagged [spoofing]

A kind of attack in which one system, program, or user successfully masquerades as another.

Filter by
Sorted by
Tagged with
1
vote
1answer
50 views

Would it be possible to create an external mac address spoofer?

I was wondering if it would be possible to create some sort of ethernet passthrough device, but this device also functions as a layer 2 mac address spoofer, which can be used with any device without ...
0
votes
1answer
53 views

Why can't mail clients verify an email was sent from the user and server it claims to be from?

Background When I explain to my clients the security issues around email spoofing, I often explain that emails are like regular mail. Anyone can write Jon Doe on the return address, but that doesn't ...
1
vote
1answer
52 views

Best way to learn every way I am tracked online? [closed]

Is there a course or resource for a person with basic networking skills to see all ways a website like FB or Google can track and identify users + how to spoof them and look natural? Not for malicious ...
1
vote
0answers
52 views

Retrieving a No Caller ID phone number? [closed]

I got a call from an unknown number, more specifically, a no caller ID number. I’m not the guy who gets a lot of calls from a no caller ID phone number, and usually, when I got one is typically the ...
2
votes
1answer
176 views

Man in the middle using HTTPs downgrade to HTTP

In general browsers attempt to establish a HTTPs-Connection if possible. How would you force a browser to fallback to HTTP when somebody enters asdf.xyz in the search bar of his/her browser without ...
1
vote
1answer
134 views

Is it possible for a domain to be faked?

I was talking to PayPal customer service and they were trying to tell me PayPal does not have any third parties, so when I shown them https://www.paypal.com/uk/webapps/mpp/ua/third-parties-list they ...
0
votes
1answer
49 views

Redirection - Different Website from Different Computer

There are URLs which its only purpose is to redirect the HTTP requestor to a correct website. Say, if I tried to access example.com/0wa/RaNd0m from my computer, it would redirect me to wikipedia.com. ...
0
votes
0answers
26 views

Can EGNOS be used to detect GPS spoofing?

From my understanding, EGNOS broadcasts corrections to GPS signals to allow receivers to calculate their position with a higher accuracy and is available via satellite or the internet. My question is: ...
1
vote
2answers
149 views

How to spoof IMEI/SIM location?

Once you plug it into a phone and power it on, the IMEI number of the phone and the SIM's serial number will be transmitted to the nearest cell tower(s). source Is there a way to spoof the location ...
0
votes
2answers
87 views

Does an attacker need to guess or brute-force a password for TCP spoofing?

From my understanding, TCP spoofing can be carried out if the attacker can correctly guess the sequence numbers from the response packets (to mimic the real client). The attacker may even obtain this ...
0
votes
1answer
66 views

Internal HTTPS recommended security practices

So I'm by no means a security expert. I'm just a recently graduated software developer who is working on a contract project and I want to ensure I'm taking appropriate security measures for my client. ...
0
votes
2answers
68 views

How Can I Prevent Hackers From Spoofing TCP messages onto my server?

I have a Python client and server communicating over a TCP socket - they send and receive a certain set of standardized string commands to each other. How can I prevent a hacker from creating their ...
0
votes
2answers
134 views

What prevents someone from spoofing their public key when trying to establish an SSH connection? [duplicate]

Recently I've been trying to learn the mechanisms behind SSH keys but I came across this question that I haven't been able to find an answer to (I haven't figured out how to word my question such that ...
0
votes
2answers
178 views

How do I access a website on my phone without it being able to determine that it was accessed from the same phone and location?

How is it possible to create an account in a website with completely different credentials without the website being able to link the user of the first account and this new one? Tor is not a viable ...
4
votes
2answers
140 views

Are there security reasons for prohibiting universal mac address modification?

Background In a standard 48-bit MAC address, the 7th (most significant) bit specifies whether it is a universally-administered address (UAA) or a locally-administered address (LAA). If it is 0, then ...
1
vote
1answer
88 views

DDoS using websites instead of bots?

What if a ddos attacker hits public websites (google, amazon etc) with some requests but spoofed the souce ip to the victim's ip. Now the responses will be sent to the victim's ip. Attacker can rotate ...
0
votes
0answers
24 views

Circumventing inbound traffic rule by faking reply traffic

My question is about security groups/firewalls and protecting a virtual private cloud from the external world. Here is a description of VPC default policy for inbound/outbound traffic (on AWS): ...
1
vote
1answer
46 views

Access-Control-Allow-Origin and security behind it [duplicate]

I have some troubles to understand how the header "Access-Control-Allow-Origin" can really be secure. Let me explain what I have in mind: Let's say I have an API on api.contoso.com setting this ...
0
votes
0answers
268 views

Why does bettercap not capture any traffic and why is its web UI just a blank page?

I'm running Debian10/KDE with the nftables firewall enabled on my host machine and would like to test my phone. In the virtual machine I'm running Kali Linux with bettercap and am trying to sniff ...
1
vote
1answer
69 views

Is it possible to spoof a GPS satellite?

If it is possible? Any devices that can be bought to do so. If not, how are GPS satellites are designed to be spoof-free.
0
votes
0answers
25 views

How can you spoof your caller ID? [duplicate]

How can I spoof my caller ID to make it look like someone else is calling for pen testing purposes. Note: I tagged Python because I am trying to make it with Python.
1
vote
1answer
213 views

Can a DNS query source be spoofed?

Will the DNS server reply to the spoofed address if you send a DNS request on behalf of it? What I'm trying to ask isn't DNS spoofing but spoofing the source address.
1
vote
3answers
71 views

What is the best defense for a multi-layered attack: Spoofing, MiTM, Login CSRF?

How would one go about defending against this sort of attack to best protect a sloppy user? There can be obvious signs of a spoofing attack, such as not using SSL, slightly different domain, etc, but ...
4
votes
1answer
168 views

Why can't spoofed caller ID's be identified?

There are several posts here about how easy it is to spoof caller ID and that there is no way to detect it. I did find one post suggesting the calls to 1-800 numbers could not be spoofed. being ...
0
votes
0answers
67 views

ARP spoofing, no connection on target device

since a few days i'm interested in sniffing/spoofing. I'm running Kali as a Host and MITMf (0.9.8). My command ist: python mitmf.py --arp --spoof --gateway X.X.X.1 --target X.X.X.2 -i wlan0 ...
0
votes
0answers
27 views

Mobile phone number spoofing [duplicate]

I received a text message from my son but it came up on my phone as not in my contacts and hence the number was displayed not his name. It was from an iPhone 7 fully up to date iOS and not with any ...
4
votes
2answers
1k views

Is it possible to mac-spoof Xfinity Wireless?

Background Comcast/Xfinity operates various wireless hotspots across the US, accessed via the SSID xfinitywifi through the many wireless access points shown on https://hotspots.wifi.xfinity.com/ ...
0
votes
0answers
90 views

How does an IMSI catcher “impersonate” a base station/cell tower?

On reading about IMSI catchers, I keep seeing that they "impersonate" a real cell tower or "base station" so that the phone drops its signal-carried data on that machine while on its way to the ...
0
votes
2answers
483 views

What to do if my MAC has been spoofed?

My MAC address has been spoofed by a neighbor to access my WiFi, positively. I know it's futile changing the WPA key or not broadcasting the SSID. What are my options at this point ?
1
vote
0answers
87 views

Is there a way to find out WHO sent me a life threatening text? [closed]

Recently I received several text messages from TWO different numbers that I did not recognize. I called the numbers back, and texted them, but there was no answer, or vm. I googled them as well, and ...
-1
votes
1answer
72 views

Spoof txt and number [closed]

Someone sent me a txt that was old, from a number that I recognize. It originally was from that person months ago, but they erased it. It was resent to me and I was supposed to have sent messages to ...
0
votes
1answer
40 views

Spoofed email: can't determine Purported Responsible Address

I am studying the SMTP protocol and follow a course materials to setup a PoC spoofed email by talking with a SMTP server of our department. This is what I have right now: shuaiw@shuaicpu1:~$ telnet ...
0
votes
2answers
68 views

Can I be reasonably certain that IRS website is genuine? [duplicate]

https://www.irs.gov/identity-theft-fraud-scams/identity-verification I received a letter in the mail indicating that I need to verify my ID with the IRS. Can I be reasonably certain that the website ...
46
votes
4answers
13k views

Someone called someone else with my phone number

Sequence of events: I didn't touch my phone all day (at work, busy day, know it didn't even come out of my pocket, but was on). 5:20pm I get a call by a guy asking me who I am and why I called him at ...
1
vote
1answer
61 views

How do computers store printer presets?

When you connect to a printer on MacOS or Windows, the system stores the printer so you can connect to it later. Does anyone know which criteria is referenced to validate it is the same printer when ...
7
votes
1answer
1k views

How Concerning Is This X-CU-modified: FAKECU Text Attack?

A user clicked on the link of this email and entered their credentials, thinking the message was legitimate. However, the link didn't redirect to the fake site, and instead their mail client sent them ...
2
votes
2answers
1k views

My personal phone sent a text message that I did not send

In an SMS conversation, my friend received a text message within our SMS thread that was clearly not sent from me, and that did not appear in my SMS thread. They took a screenshot and it is in Chinese ...
3
votes
2answers
84 views

How do you know which site credentials are sent to when signing into Oauth site in native apps?

I sometimes use these features where I can use my Google account to sign in to different service providers. For example, the Postman app lets me sign in to it using either their own user store, or ...
0
votes
1answer
359 views

Why does arp spoofing on a local network 'break' internet access for the victim?

I'm doing some experimenting with Kali on my home network and was wondering about something regarding ARP spoofing. When I ARP spoof another device AND the default gateway, Internet access stops ...
1
vote
2answers
470 views

Can the source of an SMS message be spoofed? [duplicate]

My fiancé has a drunkard, terrible ex. She sent me a screen shot of her phone saying he sent her a text but it’s not on his phone. He said he didn’t send it. The number at the top appears to be his in ...
0
votes
1answer
143 views

WiFi security against spoofing attacks

I am about to install some custom pi cameras that connect to my network via WiFi. I know people hack wifi through spoofing SSID. My password is randomly generated and is impossible to brute force ...
0
votes
0answers
54 views

Someone is calling from my number, and its not me? [duplicate]

My number is being regularly spoofed by someone. Today, I got 100 + calls from people claiming I called them. I answered some of the calls they are all locals from my province. I asked my provider ...
1
vote
0answers
30 views

SMS spoofing detection [duplicate]

Our company uses SMS delivery providers like Nexmo etc. We have noticed some of our recipients have received phishing sms messages from fraudsters where the number/sender name was spoofed to match our ...
33
votes
5answers
18k views

Is it possible to spoof an IP address to an exact number? [closed]

The title says it all really. Say my IP address was 1.2.3.4 and I wanted to change or 'spoof' it so that its exactly 2.3.4.5, would this be possible or are there too many varying factors that need to ...
0
votes
0answers
72 views

How to protect from being the spoofed number on caller ID?

The question How to protect from caller-id spoofing? focuses on how to protect oneself from incoming calls with spoofed caller ID information. This question is about how to protect oneself when ...
0
votes
0answers
128 views

Is it possible for a hacker to spoof the internet time, or any HTTP or HTTPs response?

I want to create an application that self-destruct after a certain date ( say: 2022 January 1st). For this I will get the time from the internet, and then compare it with the given date, and if the ...
56
votes
7answers
11k views

How can caller ID be faked?

My late brother was contacted by someone on landline number operated by a carrier in Australia and which displayed on caller ID. I traced the number to a company and though they did call him on a ...
1
vote
3answers
148 views

How to limit web API microservice communication to specific list of machines?

I have an PHP API that I want to be consumed only by one static website. However the HTTP is not secure as from what I suspect any header can be spoofed (IP - I may be wrong here, domain name, and so ...
1
vote
1answer
123 views

MAC Spoofing - Keep victim out

I have successfully done a MAC Spoofing Attack on my open (ad-hoc) network using the macchanger tool (OS: Kali linux). I would like to know what are the common techniques to keep the connection alive ...
1
vote
0answers
86 views

What information for identification does a WiFi router get from a connecting device (Android)? What information can be spoofed?

When I want my device to connect to a WiFi router and make the router not recognize the device I have to change the MAC and the hostname. Is this right? And what information will also be usually ...

1
2 3 4 5 6