Questions tagged [spoofing]

A kind of attack in which one system, program, or user successfully masquerades as another.

Filter by
Sorted by
Tagged with
3
votes
1answer
241 views

Is it possible to mac-spoof Xfinity Wireless?

Background Comcast/Xfinity operates various wireless hotspots across the US, accessed via the SSID xfinitywifi through the many wireless access points shown on https://hotspots.wifi.xfinity.com/ ...
0
votes
0answers
64 views

How does an IMSI catcher “impersonate” a base station/cell tower?

On reading about IMSI catchers, I keep seeing that they "impersonate" a real cell tower or "base station" so that the phone drops its signal-carried data on that machine while on its way to the ...
0
votes
2answers
219 views

What to do if my MAC has been spoofed?

My MAC address has been spoofed by a neighbor to access my WiFi, positively. I know it's futile changing the WPA key or not broadcasting the SSID. What are my options at this point ?
1
vote
0answers
78 views

Is there a way to find out WHO sent me a life threatening text? [closed]

Recently I received several text messages from TWO different numbers that I did not recognize. I called the numbers back, and texted them, but there was no answer, or vm. I googled them as well, and ...
-1
votes
1answer
62 views

Spoof txt and number [closed]

Someone sent me a txt that was old, from a number that I recognize. It originally was from that person months ago, but they erased it. It was resent to me and I was supposed to have sent messages to ...
0
votes
1answer
27 views

Spoofed email: can't determine Purported Responsible Address

I am studying the SMTP protocol and follow a course materials to setup a PoC spoofed email by talking with a SMTP server of our department. This is what I have right now: shuaiw@shuaicpu1:~$ telnet ...
0
votes
2answers
66 views

Can I be reasonably certain that IRS website is genuine? [duplicate]

https://www.irs.gov/identity-theft-fraud-scams/identity-verification I received a letter in the mail indicating that I need to verify my ID with the IRS. Can I be reasonably certain that the website ...
44
votes
4answers
10k views

Someone called someone else with my phone number

Sequence of events: I didn't touch my phone all day (at work, busy day, know it didn't even come out of my pocket, but was on). 5:20pm I get a call by a guy asking me who I am and why I called him at ...
1
vote
1answer
58 views

How do computers store printer presets?

When you connect to a printer on MacOS or Windows, the system stores the printer so you can connect to it later. Does anyone know which criteria is referenced to validate it is the same printer when ...
7
votes
1answer
1k views

How Concerning Is This X-CU-modified: FAKECU Text Attack?

A user clicked on the link of this email and entered their credentials, thinking the message was legitimate. However, the link didn't redirect to the fake site, and instead their mail client sent them ...
2
votes
2answers
492 views

My personal phone sent a text message that I did not send

In an SMS conversation, my friend received a text message within our SMS thread that was clearly not sent from me, and that did not appear in my SMS thread. They took a screenshot and it is in Chinese ...
3
votes
2answers
77 views

How do you know which site credentials are sent to when signing into Oauth site in native apps?

I sometimes use these features where I can use my Google account to sign in to different service providers. For example, the Postman app lets me sign in to it using either their own user store, or ...
0
votes
1answer
147 views

Why does arp spoofing on a local network 'break' internet access for the victim?

I'm doing some experimenting with Kali on my home network and was wondering about something regarding ARP spoofing. When I ARP spoof another device AND the default gateway, Internet access stops ...
1
vote
2answers
358 views

Can the source of an SMS message be spoofed? [duplicate]

My fiancé has a drunkard, terrible ex. She sent me a screen shot of her phone saying he sent her a text but it’s not on his phone. He said he didn’t send it. The number at the top appears to be his in ...
0
votes
1answer
114 views

WiFi security against spoofing attacks

I am about to install some custom pi cameras that connect to my network via WiFi. I know people hack wifi through spoofing SSID. My password is randomly generated and is impossible to brute force ...
0
votes
0answers
52 views

Someone is calling from my number, and its not me? [duplicate]

My number is being regularly spoofed by someone. Today, I got 100 + calls from people claiming I called them. I answered some of the calls they are all locals from my province. I asked my provider ...
1
vote
0answers
23 views

SMS spoofing detection [duplicate]

Our company uses SMS delivery providers like Nexmo etc. We have noticed some of our recipients have received phishing sms messages from fraudsters where the number/sender name was spoofed to match our ...
0
votes
0answers
37 views

Spoofing phone number [duplicate]

How it's possible spoofing an existing phone number? I have read something about ss7 exploitation, but i'm not sure is necessary. Can someone explain me some theoretical techniques?
32
votes
5answers
12k views

Is it possible to spoof an IP address to an exact number? [closed]

The title says it all really. Say my IP address was 1.2.3.4 and I wanted to change or 'spoof' it so that its exactly 2.3.4.5, would this be possible or are there too many varying factors that need to ...
0
votes
0answers
69 views

How to protect from being the spoofed number on caller ID?

The question How to protect from caller-id spoofing? focuses on how to protect oneself from incoming calls with spoofed caller ID information. This question is about how to protect oneself when ...
0
votes
0answers
116 views

Is it possible for a hacker to spoof the internet time, or any HTTP or HTTPs response?

I want to create an application that self-destruct after a certain date ( say: 2022 January 1st). For this I will get the time from the internet, and then compare it with the given date, and if the ...
56
votes
7answers
11k views

How can caller ID be faked?

My late brother was contacted by someone on landline number operated by a carrier in Australia and which displayed on caller ID. I traced the number to a company and though they did call him on a ...
1
vote
3answers
104 views

How to limit web API microservice communication to specific list of machines?

I have an PHP API that I want to be consumed only by one static website. However the HTTP is not secure as from what I suspect any header can be spoofed (IP - I may be wrong here, domain name, and so ...
1
vote
1answer
103 views

MAC Spoofing - Keep victim out

I have successfully done a MAC Spoofing Attack on my open (ad-hoc) network using the macchanger tool (OS: Kali linux). I would like to know what are the common techniques to keep the connection alive ...
0
votes
0answers
453 views

Problems relaying NTLMv2 with Responder and MultiRelay

I'm currently experimenting with mitm relay attacks using Responder.py and MultiRelay.py tool and running into problems. I have the following LAB setup: Kali Box: IP: 192.168.1.13 ...
1
vote
0answers
81 views

What information for identification does a WiFi router get from a connecting device (Android)? What information can be spoofed?

When I want my device to connect to a WiFi router and make the router not recognize the device I have to change the MAC and the hostname. Is this right? And what information will also be usually ...
6
votes
3answers
327 views

What if the Google account login screen is spoofed [duplicate]

I am talking about the apps that allow using my google account for login. Nothing against Postman, just using its login screen for example - My concern is that an app could be spoofing this whole ...
0
votes
1answer
121 views

How can Ettercap act as a client instead of a gateway?

I am trying to execute an attack that requires a full-duplex MiTM position. This is the reason why I choose to use Ettercap. I have picked DHCP spoofing as the attack of choice. The problem that I ...
1
vote
0answers
315 views

Strange inbound MMS messages

We received some strange inbound MMS messages on our Twilio account today. Our account was not compromised, as there are no suspicious outbound messages sent from our number via Twilio. We first ...
0
votes
0answers
19 views

Connect to amazon rds SQL server through spoofed ip address [duplicate]

I'm using amazon MySQL server and grant only my server IP to connect to the database, the question is can someone else access to the database through spoofed IP address and MySQL server credentials?
3
votes
2answers
171 views

How can GNSS spoofing be so easy? Don't the satellites sign their messages?

BBC News reports that a new study accuses Russia of massive GPS spoofing (see also this linked blog article). I am surprised that this is so easy¹, in particular since GPS originates as a military ...
1
vote
2answers
104 views

SPF, DKIM and DMARC - How do receiving/recipient mail servers know how and when to validate the mail?

I have spent a bit of time researching SPF, DKIM and DMARC mechanisms however If I understand correctly, these help the recipient to confirm whether the domain is legitimate but only if they have ...
9
votes
4answers
3k views

Spam email “via” my domain, but SPF record exists

I just got an email from some random person's name "via" info@mydomain.com, although info@mydomain.com is just a distribution group within G Suite. We have an up-to-date SPF record added from Google, ...
0
votes
0answers
26 views

anti-spoofing measures for SAQ C business with iPads/NCR silver

So I'm just wondering what types of anti-spoofing measures a SAQ-C business would need: https://www.pcisecuritystandards.org/documents/PCI-DSS-v3_2_1-SAQ-D_Merchant.pdf There's a lot of built in ...
0
votes
0answers
22 views

Is this type of attack possible? [duplicate]

I'm wondering if it is possible for an attacker to spoof his IP address to look like mine. For example, in Facebook's connection logs, would it be possible for an attacker to log into my account while ...
0
votes
2answers
322 views

Websocket connection spoofing

I have a websocket server, where client credentials get validated upon connecting and are never bothered again, since connections are stored in memory. I was wondering, a TCP connection is basically ...
0
votes
0answers
190 views

Unable to join airbase-ng AP

In a test environment, I am trying to spoof my basic router's Wi-Fi access point using the following: Instructions: https://www.udemy.com/penetration-testing/learn/v4/t/lecture/2693224?start=0 USB Wi-...
0
votes
1answer
98 views

How to track anonomous SMS on your smartphone [duplicate]

I sometimes receive sms from unknown numbers asking me to send money on another unknown number. Is there a way to track the source of such numbers through logs or other technologies or solutions?
0
votes
0answers
514 views

How to trace spoofed phone numbers?

I keep getting scam calls using spoofed phone numbers. Is there a way for me to trace? I have contacted the authorities but they seem to be not as enthusiastic as I am about solving the issue.
-1
votes
1answer
116 views

Can I spoof a specific AP of a network?

My college wifi requires a certificate installation and also is very unreliable. Therefore, I prefer using my mobile data when I am on campus. But the college has its own app for attendance taking and ...
1
vote
1answer
351 views

ISP's defence methods against IPv6 Spoofing

I read about there being methods applied by ISP's to defend networks against IPv4 spoofing, but not too much about IPv6 spoofing. I'm wondering if someone has some knowledge if ISP's apply techniques ...
1
vote
1answer
191 views

Apple ID scam, gave control of my computer for a few minutes

I was called from what appears to be a legitimate apple phone number and I was told there was suspicious activity. Then I said I wanted to speak to someone and I was connected to a someone with an ...
2
votes
0answers
236 views

How to defend against adblock detection/adblock subscription leaks?

Is there a best practice (or useful extension) for defending against adblock fingerprinting techniques? I'm not asking about how to bypass adblock detection as such, but rather how one might appear ...
23
votes
6answers
7k views

How to be mean to some people that stole my phone [closed]

My iPhone was stolen a couple of weeks ago and I started receiving the following messages on my recovery secondary number that I provided with Find My iPhone: The URLs are: https://apple.inc-view.us/...
0
votes
1answer
461 views

How safe are free SSL - HTTPS cert (fake sites with HTTPS) [duplicate]

I recently heard from one of my friends that we can create our own SSL certificate. So IF I am going to create a fake SSL cert for a fake bank site, its going to auto get HTTPS and say secured in ...
7
votes
1answer
326 views

Do major ISPs still ignore IP spoofing?

I was reading this question: Why don't ISPs filter on source address to prevent spoofing? and based on those answers, ISPs ignore it because of the overhead of checking for spoofing. But that ...
1
vote
2answers
1k views

Prevent Text Spoofing - Best methods

In an enterprise environment we have been inundated with spoof texts appearing to be from the corporate office. After much research it appears Verizon isn't able to assist. Just wondering if anyone ...
1
vote
3answers
432 views

is spoofing CA to sign application possible?

Is it possible to spoof the CA of any server to sign some application? As like as what CarbonCopy claims?
2
votes
1answer
164 views

Smartphone fingerprint plus iris scanning for login

I have often thought about the fact that when intimate relationship partners live together they eventually tend to sneak over your shoulder and gain access to your password on either your mobile phone ...
6
votes
1answer
327 views

How could malicious code changes in a GitHub pull request be masked by an attacker?

When viewing a pull request on GitHub (or the equivalent on any other platform), the web interface displays a diff of the changes for you to review. Reviewing the diff is obviously vulnerable to ...

1 2 3 4 5