Skip to main content

Questions tagged [spoofing]

A kind of attack in which one system, program, or user successfully masquerades as another.

Filter by
Sorted by
Tagged with
1 vote
2 answers
178 views

Bank scammer and banking app

There are plenty of scammers trying to get access to my bank account. Usually they call me claiming they are from my bank’s fraud department, and try to convince my that there is a problem with my ...
gnasher729's user avatar
  • 2,479
0 votes
0 answers
78 views

How to avoid non-in-person "handshakes" and spoofing due to compromised URL data on NFC card

I am designing a system that allows users to purchase my NFC cards and sign up for an account on my online SaaS website. The System For the sake of explanation, assume the website is hosted at domain ...
user512716's user avatar
0 votes
0 answers
92 views

Detecting SMS spoofing when there is multiple routing

How can SMS spoofing be detected? I know we can find it by message centre, but what if in the case of multiple routing?
Gayatri Kandula's user avatar
1 vote
2 answers
129 views

Isolating encrypted and unecnrypted Windows installations and protecting the boot loader

I want to use my PC both for gaming and for stuff like keeping cryptocurrency wallets, online banking, etc. I need to install games as admin but of course I don't want them to be able to access my ...
Vlad's user avatar
  • 111
0 votes
0 answers
86 views

What is the best way to demonstrate spoofing?

I use this tutorial to spoof with Kali Linux on VirtualBox: https://www.geeksforgeeks.org/ssl-stripping-and-arp-spoofing-in-kali-linux/ However got some errors ip route: Route information 10.1.80.121 ...
Alex Anonym's user avatar
3 votes
1 answer
343 views

Modern VPNs and average MITM attacks

I am trying to untangle a number of concepts (all of which i am unfamiliar with) in this question, but they all point to a seemingly basic question; With modern tunneling protocols, SSL ciphers and ...
myol's user avatar
  • 175
1 vote
1 answer
267 views

How to prevent hackers from using my phone number to make accounts?

It seems a hacker is using my phone number to make fraudulent account, and I would like to prevent that. Usually, if a person has your phone number, they're not able to make an account because a ...
user3041883's user avatar
0 votes
1 answer
550 views

Would a spoofed SMS message show up in the same chat history as a legitimate SMS?

I received an odd SMS message from xfinity earlier. The message looks real, and the link they provided is real, but they said I ordered a movie through their service, which I did not. I am wondering ...
Zaku's user avatar
  • 101
0 votes
1 answer
3k views

SMS spoofing in the US

Long story short(ish), I have a friend who's been in a relationship with this girl for a while. When they started she had just moved across country and was in something open with some other dude. She ...
Arkyris's user avatar
1 vote
1 answer
350 views

Windows 10 Update - Man In The Middle Attack - Tamper Update [duplicate]

I am connecting to a wi-fi network and blocked all IP addresses in this network with a regular Windows 10 firewall. The only available IP addresses are: 192.168.1.1 = gateway 192.168.1.102 = my own ...
Minerva Developer's user avatar
1 vote
2 answers
378 views

How to block personal devices on corporate network

Currently we are working to secure our internal LAN and due to this we are planning to stop mobile devices (such as personal laptops and mobile phones) to connect on corporate network. Our key area of ...
ZAHID HASEEB's user avatar
9 votes
3 answers
4k views

Can an SSH server in password mode be impersonated if I ignore the fingerprint warning?

Assume that I never check the server fingerprint when logging in to an SSH server. This means that certain configurations of SSH can be impersonated. For example, I can log into a server that only has ...
personal_cloud's user avatar
0 votes
0 answers
118 views

Retrieving Android phone's identifiers

I will be publishing a fingerprinting app that shows its user how much access to their Android phone's identifiers it has. I haven't started writing it because I need to understand how can any Android ...
CurtisB's user avatar
  • 33
0 votes
1 answer
105 views

Using another's text number to commit ongoing fraud [duplicate]

Some Vietnamese refugee families have been Bitcoin defrauded by someone using an 805 text number. Lookups say it belongs to a party in Tennessee. I want to know if it is possible that scammers in ...
Hugh Giblin's user avatar
0 votes
1 answer
108 views

what if I just simply rename of a file instead of using right to left override

I'm browsing the ATT&CK and I understand the meaning of right-to-left override that it is using non-printing unicode character, but what is the different if I just simply rename a file like this: ...
Vu Tan's user avatar
  • 1
0 votes
0 answers
758 views

Spoofed iMessage? Apple account breach? What are the possible ways this happened?

See the screenshot below. A friend asked me about this. Person #1 had a group text thread with Person #2 and Person #3. At the top, Person #2 sent a photo and a message. Person #3 replied. Then there ...
mikato's user avatar
  • 119
1 vote
1 answer
864 views

Spoofing TCP/IP headers and uniqueness of the host name

I have some related questions: Is it possible to spoof the source address in the TCP/IP header when using HTTPS? If possible, is there any way to detect source address change? I think the checksum is ...
Szyszka947's user avatar
1 vote
1 answer
267 views

Authorizing 3rd Party Envelope Sender to Impersonate Header Sender

Rewriting for clarity: This is regarding emails send from a 3rd party marketer spoofing one of our email addresses in the message header from field. In these emails the envelope sender would come ...
Neobane's user avatar
  • 11
0 votes
1 answer
317 views

Is it possible to spoof a service running on a port in Ubuntu?

I was looking into the idea of port spoofing, and I came across this GitHub repository. I'm mainly looking to disguise my computer as something else, whereas this program opens every TCP port and ...
sketch54's user avatar
1 vote
0 answers
101 views

How would a cellular phone call be connected if there are two phones with the same number? [closed]

In the 2004 movie "Primer", the a character goes back in time, and there are two copies of him, both with a cell phone. The character receives a phone call initially, and then receives the ...
TechnoSam's user avatar
  • 119
0 votes
0 answers
408 views

Loopback source IP Spoofing

Assuming I have a service running with elevated privileges on a host, and another service is listening on a UDP port with access for everyone (0.0.0.0) is it possible to craft a spoofed UDP datagram ...
GrowingBrick's user avatar
1 vote
0 answers
90 views

How do tracking services stop third party requests?

Facebook Pixel and Google Analytics for example give you an API key to identify tracking requests from your website. But what is to stop someone from grabbing the key, spoofing your domain and ...
Ian's user avatar
  • 11
0 votes
1 answer
189 views

Why do DDoS attacks spoof DNS source IPs?

Recently, a lot of my friends have been talking about botnets. They said they've created their own.‌‌ Obviously, I ​​know this is all illegal so I try not to take part in any of it. But I've been ...
Hackermon's user avatar
1 vote
2 answers
310 views

Malicious SMS and iMessage Interception

I have an interesting situation on my hands. There are people in my neighborhood that have been harassing me for some time now. It appears that these individuals can are receiving my text (sms) ...
AnonAverageAlice81204's user avatar
0 votes
2 answers
113 views

Business Email Compromise emails sent to personal email accounts

I am using Google workspace to handle my domain emails. At a certain point, employees started to receive spoofing emails to their @mydomain.com addresses. I blocked these emails and it worked. However,...
Eng7's user avatar
  • 101
0 votes
1 answer
440 views

Can this logic with regard to checking Reverse DNS records be flawed?

For my web app, I hardcode a reverse DNS detection for common web crawlers. And for detecting them I use their Reverse DNS, which I always check whether it includes i.e. google.com. My questions would ...
Munchkin's user avatar
  • 264
0 votes
1 answer
137 views

"Mutuality" of public key authentication

I'm a newbie when it comes to cryptographic security, but there's something I'm not quite getting concerning the "mutual" aspect of public key authentication. Say you have a client X, and ...
DevelJoe's user avatar
  • 141
1 vote
1 answer
149 views

SPF records and spoofing

Lets say we have this SPF record v=spf1 include:spf.protection.outlook.com include:spf.onprem.com -all` And this record v=spf1 include:spf.protection.outlook.com include:spf.onprem.com ?all What ...
user269161's user avatar
0 votes
0 answers
223 views

How can you spoof you caller id but not using a voip (your carrier instead)?

My research: I found this security stackexchange post but it didn't answer my question. I know that you can do similar things using astresik with voip provider. I came up on o blog that explain that ...
s0n0fj0hn's user avatar
0 votes
1 answer
154 views

When GPS is spoofed in a smartphone, does this affect whatever is being monitored?

When GPS is spoofed in a smartphone, does this affect whatever is being monitored? Suppose I spoof the GPS on my smartphone, such as lazy Pokemon GO players do to play from their couch. Will this ...
Mark Besser's user avatar
0 votes
1 answer
600 views

Securing a Websocket Connection in case of XSS Vulnerability

Goal Authenticate the Client via HTTP Request. Authenticate the Client's WebSocket connection. Prevent exploitation of WebSocket connection(when a XSS Vulnerability is present on website). How I'm ...
litz's user avatar
  • 3
2 votes
2 answers
741 views

Do fowarded emails retain DMARC protection?

Assume I ask someone to create a filter in their Gmail account that automatically forwards certain emails to my inbox. If the original email was protected with DMARC, would the forwarded email also be ...
Bradford Griggs's user avatar
4 votes
2 answers
290 views

Fake AP for Staff Security Awareness

We are working on an activity to train staff about security. Is there any way to spoof the company's guest router and ask staff to provide login credentials (as public wifi does) and when they do that,...
user avatar
0 votes
1 answer
159 views

Cell Phone texting [closed]

Is it possible for someone to redirect text messages to you from another’s phone? Something weird is going on…over the last few weeks I have received “wrong number”text messages from people with ...
danielle miller's user avatar
0 votes
1 answer
235 views

DNS local cache spoofing with malware or RAT

I was learning networking and knew that browsers don't have algorithms to convert domain names to IPs. It queries a DNS server. After that, the computer remembers the IP, so next time the domain is ...
Jenia's user avatar
  • 119
5 votes
0 answers
582 views

How did ntpd get patched to prevent NTP time synchronization attacks?

I recently tested the NTP Time Synchronization Attack as described and demonstrated by Jose Selvi in 2015. Basically, the attack was mostly used to send the victim's clock in the future, so the ...
programings's user avatar
0 votes
0 answers
1k views

How does the NSA "masquerade as any routable IPv4 or IPv6 host"?

I was reading the Wikipedia article about TAO and there is written that: Details on a program titled QUANTUMSQUIRREL indicate NSA ability to masquerade as any routable IPv4 or IPv6 host. This enables ...
robertspierre's user avatar
0 votes
1 answer
634 views

Spoof IP address after a TCP handshake established

Is it possible to spoof the IP once a TCP handshake was performed successfully? For example: Perform the handshake Use the session with the same IP which performed handshake but on different machine ...
saguaro_water's user avatar
1 vote
0 answers
483 views

SPF fail, DKIM pass, where did the emails originate from [closed]

I have been a victim of a fraud where my solicitor's email address was used to dupe me out of a house purchase deposit. How do I determine where the emails originated from - did the crooks use emails ...
Claire's user avatar
  • 11
1 vote
0 answers
298 views

Prevent IP session hijacking

I was thinking of the following scenario : a network is behind a router (performing NAT) and firewall this firewall denies all unsollicited incoming packet a user on a computer of the network opens a ...
DevShark's user avatar
  • 343
1 vote
1 answer
3k views

SPF/DMARC for shared email provider (gmail) - how did this email pass SPF?

We recently received an email from a self described "white hat hacker" purporting to be from our own organization. According to the mail headers, spf, dmarc, dkim and arc all passed okay and ...
Dave Smylie's user avatar
1 vote
1 answer
159 views

Spoof texting a regiatered number to yourself and relying....having a conversation [closed]

I feel like I am going crazy. A friend was at my house and received text messages from a number from a person i know. She had a conversation with this number for basically a week. She is now saying ...
Abbs CP's user avatar
  • 11
0 votes
1 answer
523 views

Spoof publisher info on Windows applications

Let me start by acknowledging that I have absolutely no experience with Windows development and this is purely for academic purposes. I apologize for incorrect terminology and welcome corrections or ...
DaArFI's user avatar
  • 1
1 vote
1 answer
263 views

Would it be possible to create an external mac address spoofer?

I was wondering if it would be possible to create some sort of ethernet passthrough device, but this device also functions as a layer 2 mac address spoofer, which can be used with any device without ...
Alexm's user avatar
  • 11
1 vote
1 answer
154 views

Why can't mail clients verify an email was sent from the user and server it claims to be from?

Background When I explain to my clients the security issues around email spoofing, I often explain that emails are like regular mail. Anyone can write Jon Doe on the return address, but that doesn't ...
MikeSchem's user avatar
  • 2,351
1 vote
1 answer
166 views

Best way to learn every way I am tracked online? [closed]

Is there a course or resource for a person with basic networking skills to see all ways a website like FB or Google can track and identify users + how to spoof them and look natural? Not for malicious ...
reputable2020vision's user avatar
1 vote
0 answers
179 views

Retrieving a No Caller ID phone number? [closed]

I got a call from an unknown number, more specifically, a no caller ID number. I’m not the guy who gets a lot of calls from a no caller ID phone number, and usually, when I got one is typically the ...
User3298137412's user avatar
2 votes
1 answer
1k views

Man in the middle using HTTPs downgrade to HTTP

In general browsers attempt to establish a HTTPs-Connection if possible. How would you force a browser to fallback to HTTP when somebody enters asdf.xyz in the search bar of his/her browser without ...
Martin Dallinger's user avatar
1 vote
1 answer
236 views

Is it possible for a domain to be faked?

I was talking to PayPal customer service and they were trying to tell me PayPal does not have any third parties, so when I shown them https://www.paypal.com/uk/webapps/mpp/ua/third-parties-list they ...
Coderxyz's user avatar
  • 550
1 vote
1 answer
428 views

Redirection - Different Website from Different Computer

There are URLs which its only purpose is to redirect the HTTP requestor to a correct website. Say, if I tried to access example.com/0wa/RaNd0m from my computer, it would redirect me to wikipedia.com. ...
Fit Tony's user avatar

1
2 3 4 5 6