Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [spoofing]

A kind of attack in which one system, program, or user successfully masquerades as another.

1
vote
1answer
56 views

ISP's defence methods against IPv6 Spoofing

I read about there being methods applied by ISP's to defend networks against IPv4 spoofing, but not too much about IPv6 spoofing. I'm wondering if someone has some knowledge if ISP's apply techniques ...
1
vote
1answer
94 views

Apple ID scam, gave control of my computer for a few minutes

I was called from what appears to be a legitimate apple phone number and I was told there was suspicious activity. Then I said I wanted to speak to someone and I was connected to a someone with an ...
0
votes
1answer
43 views

How to defend against adblock detection/adblock subscription leaks?

Is there a best practice (or useful extension) for defending against adblock fingerprinting techniques? I'm not asking about how to bypass adblock detection as such, but rather how one might appear ...
22
votes
6answers
7k views

How to be mean to some people that stole my phone [closed]

My iPhone was stolen a couple of weeks ago and I started receiving the following messages on my recovery secondary number that I provided with Find My iPhone: The URLs are: https://apple.inc-view.us/...
0
votes
1answer
94 views

How safe are free SSL - HTTPS cert (fake sites with HTTPS) [duplicate]

I recently heard from one of my friends that we can create our own SSL certificate. So IF I am going to create a fake SSL cert for a fake bank site, its going to auto get HTTPS and say secured in ...
7
votes
1answer
184 views

Do major ISPs still ignore IP spoofing?

I was reading this question: Why don't ISPs filter on source address to prevent spoofing? and based on those answers, ISPs ignore it because of the overhead of checking for spoofing. But that ...
0
votes
0answers
33 views

How did this “hacker” make it look like I sent the email to myself? [duplicate]

So I went through my junk today as I wasn't receiving a sign up email from a service I signed up to. Looking through and another email caught my eye. The email looks like it has come from my own ...
1
vote
2answers
94 views

Prevent Text Spoofing - Best methods

In an enterprise environment we have been inundated with spoof texts appearing to be from the corporate office. After much research it appears Verizon isn't able to assist. Just wondering if anyone ...
1
vote
3answers
108 views

is spoofing CA to sign application possible?

Is it possible to spoof the CA of any server to sign some application? As like as what CarbonCopy claims?
2
votes
1answer
58 views

Smartphone fingerprint plus iris scanning for login

I have often thought about the fact that when intimate relationship partners live together they eventually tend to sneak over your shoulder and gain access to your password on either your mobile phone ...
6
votes
1answer
149 views

How could malicious code changes in a GitHub pull request be masked by an attacker?

When viewing a pull request on GitHub (or the equivalent on any other platform), the web interface displays a diff of the changes for you to review. Reviewing the diff is obviously vulnerable to ...
1
vote
1answer
118 views

Help! Someone fake texted or made a photo with my number calling and texting them [closed]

My husband received a Facebook message from a random guy who’s profile we cannot find nor could we respond! It was this picture that I attached. He’s made a picture where it looks like my phone number ...
2
votes
0answers
26 views

DNS search lists cause ambiguity, but what are practical examples of this?

Browsers and other Web software tend to allow the system resolver to use the local domain search list when resolving URLs. E.g. www -> www.example.com., if your domain search list is example.com. ...
38
votes
4answers
6k views

How could a public DNS server return bad results?

I live in a country which is under many sanctions. Both internal sanctions (government on people) and external sanctions (US on our people). In our country, YouTube, Twitter, Facebook and many other ...
0
votes
1answer
99 views

Is it possible to make a spoofing attack in a access point with same SSID target network?

With an Evil Twin attack is it possible for the access point to send malware to connected devices? If it is, how can this be prevented?
1
vote
2answers
132 views

Is it safe to add IP address to SPF record

I am a programmer who manages online exchanges user also and i have been asked to add IP address to SPF record so that one of the application can hosted on Azure can send emails to user etc.. v=spf1 +...
3
votes
1answer
1k views

How to detect WiFi spoofing? [duplicate]

I have recently become concerned that someone might be spoofing the WiFi network at my office. The network has been really unstable these last few weeks. The password isn't really that secret, and I'm ...
0
votes
2answers
97 views

Message telling me that I bought something with credit card

I just received a message via SMS that I bought something from an online shop with my credit card. The message reads like this (translated from German): Your credit card purchase - please check: - ...
2
votes
2answers
781 views

OAuth - How does the Resource Server validate the access token is not for any other Resource Server?

Let's take an example where there are two resource servers - RS1 and RS2 and there is one authorization server - AS. Both resource servers - RS1 and RS2 use authorization server - AS If a client ...
2
votes
0answers
240 views

Fake lock screen in full screen browser window

Suppose a desktop OS has a lock screen and fades and locks after inactivity. Suppose the default appearance and inactivity duration are well known (eg consider a default installation of some popular ...
1
vote
0answers
97 views

Firefox directs me to strange chinese error page, is my security compromised?

Today I was working on a project on my localhost ( I'm a web developer ), when I noticed Firefox is showing a message that means I need to login to my ISP before I can start browsing ( The ...
1
vote
1answer
92 views

How does faked DNS manage to downgrade preloaded HSTS?

Yesterday, in a bid to entertain myself for a while, I was playing around with DNS servers. I set up a DNS server locally, which I then set as my primary DNS server. Within it, I added some records ...
0
votes
0answers
260 views

Fake Wordpress reset password email with an external X-Google-Original-From header

My employer owns a Wordpress blog and I have an account with it used to submit blog posts. I have recently received a few password reset emails that link to an external site. These emails appear to ...
22
votes
4answers
567 views

Bank asked for a cross login?

I was creating a new bank account here in the US at HSBC's popular online bank... You know the step where you have to verify the account you're sending from, by receiving two small test payments? I ...
0
votes
1answer
1k views

dnsspoof doesn't spoof DNS request with IP-address of local machine

I want to spoof all DNS requests with the IP address of my local machine. However, running dnsspoof, all clients receive the real IP address and not the fake IP address of my host. I know I can ...
81
votes
1answer
23k views

Is Starbucks spoofing me?

When I connected to Starbucks's Wi-Fi, I got a security alert from MS Outlook that looks like this: I looked up secure.datavalet.io, but there's no mention of this thing anywhere. This does not ...
0
votes
0answers
256 views

Kali Linux 2 DNS spoofing: is there still a bug?

Good evening, I am trying to set up dns spoofing in kali linux 2.1 I have two kali environments, one on my tablet using linux deploy, and another on an USB stick. I managed to poison ARP using ...
0
votes
1answer
241 views

Is IP spoofing possible in Windows Desktop with user privileges?

I read on WinSockAPI that IP spoofing is disabled for Desktop windows devices (non-servers like Windows 7, etc). However, I've been able to do IP spoofing using nmap, so clearly this is possible. ...
3
votes
4answers
442 views

I started to learn about MITM attacks, and I can't figure out few things

I just started to learn about MITM attacks, and I can't figure out few things. I have few questions and appreciate all the answers. If the attacker is already in my LAN why does he need to trp to arp ...
0
votes
1answer
132 views

Spoofed number? [duplicate]

I got an offensive text message from a phone number I don't recognize. I looked up the number with reverse look up. It says the number is a land line. Have I been "spoofed"? Is there a way to find out ...
1
vote
1answer
80 views

APIPA traffic in router/netflow logs

While inspecting some flow logs, I noticed some port 22 traffic destined to a few local servers (at 10.x.x.x) . What was surprising is that the traffic originated from a 169.254.x.x IP address. Is ...
1
vote
1answer
236 views

MITM based on ARP spoofing

I fail to understand how a MITM attack sniffs packets and modifies them.In the case of ARP spoofing although the attacker has spoofed the MAC address of a host, how does he modify it? if he listen to ...
25
votes
2answers
5k views

How wise is it to use a tool for portspoofing at your server to confuse attackers?

I came across this tool recently https://github.com/drk1wi/portspoof How efficient will it be to use it to confuse hackers doing port scanning? If it's actually going to be pretty efficient, why ...
1
vote
2answers
1k views

Can I spoof my user agent so that the type of device I'm using doesn't show up?

I was looking into spoofing a user agent but all that has come up so far is spoofing the browser type. However I can still see what kind of device I am using (tbh I'm not really even sure why someone ...
0
votes
1answer
41 views

Is it possible for a single user to route connections through several IP addresses?

I have searched google for an answer to my question and can’t seem to find one. Maybe you can help me out. Is it possible to use somebody else’s IP addresses to post on a forum with? I am a moderator ...
1
vote
1answer
3k views

Reply to a spoofed SMS message

If my phone number is (212)555-1212 and Bob spoofs my number vias SMS to Alice, will Alice's reply be sent to Bob, me or both? EDIT: The concern is that the spoof prompts Alice to disclose ...
0
votes
1answer
64 views

Shmishing scam that targets Gmail access

I'm looking for information on scams that target GMail users. I believe I found an article that discusses the attack in the context of bank fraud at Warning over text message scam that allowed '...
0
votes
3answers
136 views

Can a malicious SSH server successfully *pretend* to know a client's public key?

Yes, I know that after giving an SSH public key to someone else, one should always assume that it might have been swiftly published somewhere. (For instance, give your SSH public key to GitHub, and ...
1
vote
1answer
1k views

It's there a way to bypass https nowadays?

It's there a way to bypass https (using mitm attacks) on browsers like chrome, firefox, etc? I know it could be done in some way, exploiting the NTP port, but we need the interaction of the victim. ...
3
votes
2answers
113 views

How can an end-user verify the authenticity of a third-party authentication provider's login form

Given the ubiquitous use of third party authentication providers in web apps today, how can end-users verify the authenticity of the login forms that collect their credentials? What's to stop a ...
0
votes
1answer
581 views

Tracing email sent from service?

I know an email was sent using the online service emkei.cz. Is there a way to find out who used that service to send the specific email I received?
2
votes
2answers
283 views

Protecting yourself from DNS spoof

How does one protect themself from a DNS compromised site, which also has had their SSL private key stolen? Short of monitoring which IP the packets are being sent to. Edit: Or even without the ...
5
votes
1answer
131 views

Is it worth verifying the request hostname in API-to-API communications?

When authenticating from a browser application to an API layer, you can verify the request origin for CORS requests. I'm aware that this is primarily to prevent CSRF attacks. It doesn't prevent an ...
13
votes
1answer
892 views

Did somebody try to spoof my wifi network?

I am traveling on a train in Switzerland, working on a macbook connected to a wifi hotspot that I've set up on my Phone [1] using WPA2. At some point along the journey, the internet connection drops. ...
1
vote
2answers
333 views

Why is spoofing allowed in reputed VPS services?

I just learned about IP spoofing and so I set up VMs and sent spoofed UDP packets (8.8.8.8, Facebook's IP, Twitter's IP) to myself (home PC and mobile) from well-reputed VPS providers like AWS, ...
9
votes
2answers
279 views

WPAD name collision attack victim: possible information leak

This is a home network: a wireless Linksys router serving around 5 wireless devices and 3 wired ones, two PCs and a PS4. The router is setup to serve DHCP to client devices. It has a setting to ...
8
votes
3answers
2k views

Someone is making random calls spoofing my phone number. What to do?

For the past six months, I've experienced call-backs from foreign numbers (all within the EU) telling me that I had called them earlier. At first, I thought the calls are malicious. However, due to ...
2
votes
3answers
2k views

Can iMessages be spoofed?

I am subject to legal proceedings where fake iMessages (not SMS) are being introduced by the opposing party and proclaiming to have come from me. I read about spoofing SMS messages. Is it possible for ...
0
votes
0answers
72 views

Spoof local/internal IP address on browser [duplicate]

I found this website and I didn't knew you could get the local ip of a computer with php. I also found how to do it here. So I am wondering if anyone knows how to spoof this. Also, if you know how to ...
1
vote
1answer
884 views

Is it possible to Spoof Another Machine's MAC Address on LAN?

Is it possible to Spoof Another Machine's MAC Address on LAN? I know we can spoof mac address of machine that we are currently on, using macchanger or ifconfig wlan0 ether de:ad:be:ef:ca:fe. But I ...