Questions tagged [spoofing]

A kind of attack in which one system, program, or user successfully masquerades as another.

Filter by
Sorted by
Tagged with
1
vote
0answers
42 views

SPF fail, DKIM pass, where did the emails originate from [closed]

I have been a victim of a fraud where my solicitor's email address was used to dupe me out of a house purchase deposit. How do I determine where the emails originated from - did the crooks use emails ...
0
votes
0answers
122 views

Prevent IP session hijacking

I was thinking of the following scenario : a network is behind a router (performing NAT) and firewall this firewall denies all unsollicited incoming packet a user on a computer of the network opens a ...
1
vote
1answer
231 views

SPF/DMARC for shared email provider (gmail) - how did this email pass SPF?

We recently received an email from a self described "white hat hacker" purporting to be from our own organization. According to the mail headers, spf, dmarc, dkim and arc all passed okay and ...
1
vote
1answer
60 views

Spoof texting a regiatered number to yourself and relying…having a conversation [closed]

I feel like I am going crazy. A friend was at my house and received text messages from a number from a person i know. She had a conversation with this number for basically a week. She is now saying ...
0
votes
1answer
63 views

Spoof publisher info on Windows applications

Let me start by acknowledging that I have absolutely no experience with Windows development and this is purely for academic purposes. I apologize for incorrect terminology and welcome corrections or ...
1
vote
1answer
59 views

Would it be possible to create an external mac address spoofer?

I was wondering if it would be possible to create some sort of ethernet passthrough device, but this device also functions as a layer 2 mac address spoofer, which can be used with any device without ...
0
votes
1answer
62 views

Why can't mail clients verify an email was sent from the user and server it claims to be from?

Background When I explain to my clients the security issues around email spoofing, I often explain that emails are like regular mail. Anyone can write Jon Doe on the return address, but that doesn't ...
1
vote
1answer
72 views

Best way to learn every way I am tracked online? [closed]

Is there a course or resource for a person with basic networking skills to see all ways a website like FB or Google can track and identify users + how to spoof them and look natural? Not for malicious ...
1
vote
0answers
59 views

Retrieving a No Caller ID phone number? [closed]

I got a call from an unknown number, more specifically, a no caller ID number. I’m not the guy who gets a lot of calls from a no caller ID phone number, and usually, when I got one is typically the ...
2
votes
1answer
242 views

Man in the middle using HTTPs downgrade to HTTP

In general browsers attempt to establish a HTTPs-Connection if possible. How would you force a browser to fallback to HTTP when somebody enters asdf.xyz in the search bar of his/her browser without ...
1
vote
1answer
145 views

Is it possible for a domain to be faked?

I was talking to PayPal customer service and they were trying to tell me PayPal does not have any third parties, so when I shown them https://www.paypal.com/uk/webapps/mpp/ua/third-parties-list they ...
0
votes
1answer
69 views

Redirection - Different Website from Different Computer

There are URLs which its only purpose is to redirect the HTTP requestor to a correct website. Say, if I tried to access example.com/0wa/RaNd0m from my computer, it would redirect me to wikipedia.com. ...
0
votes
0answers
27 views

Can EGNOS be used to detect GPS spoofing?

From my understanding, EGNOS broadcasts corrections to GPS signals to allow receivers to calculate their position with a higher accuracy and is available via satellite or the internet. My question is: ...
1
vote
2answers
378 views

How to spoof IMEI/SIM location?

Once you plug it into a phone and power it on, the IMEI number of the phone and the SIM's serial number will be transmitted to the nearest cell tower(s). source Is there a way to spoof the location ...
0
votes
2answers
94 views

Does an attacker need to guess or brute-force a password for TCP spoofing?

From my understanding, TCP spoofing can be carried out if the attacker can correctly guess the sequence numbers from the response packets (to mimic the real client). The attacker may even obtain this ...
0
votes
1answer
71 views

Internal HTTPS recommended security practices

So I'm by no means a security expert. I'm just a recently graduated software developer who is working on a contract project and I want to ensure I'm taking appropriate security measures for my client. ...
0
votes
2answers
73 views

How Can I Prevent Hackers From Spoofing TCP messages onto my server?

I have a Python client and server communicating over a TCP socket - they send and receive a certain set of standardized string commands to each other. How can I prevent a hacker from creating their ...
0
votes
2answers
180 views

What prevents someone from spoofing their public key when trying to establish an SSH connection? [duplicate]

Recently I've been trying to learn the mechanisms behind SSH keys but I came across this question that I haven't been able to find an answer to (I haven't figured out how to word my question such that ...
0
votes
2answers
180 views

How do I access a website on my phone without it being able to determine that it was accessed from the same phone and location?

How is it possible to create an account in a website with completely different credentials without the website being able to link the user of the first account and this new one? Tor is not a viable ...
4
votes
2answers
180 views

Are there security reasons for prohibiting universal mac address modification?

Background In a standard 48-bit MAC address, the 7th (most significant) bit specifies whether it is a universally-administered address (UAA) or a locally-administered address (LAA). If it is 0, then ...
1
vote
1answer
89 views

DDoS using websites instead of bots?

What if a ddos attacker hits public websites (google, amazon etc) with some requests but spoofed the souce ip to the victim's ip. Now the responses will be sent to the victim's ip. Attacker can rotate ...
0
votes
0answers
24 views

Circumventing inbound traffic rule by faking reply traffic

My question is about security groups/firewalls and protecting a virtual private cloud from the external world. Here is a description of VPC default policy for inbound/outbound traffic (on AWS): ...
1
vote
1answer
49 views

Access-Control-Allow-Origin and security behind it [duplicate]

I have some troubles to understand how the header "Access-Control-Allow-Origin" can really be secure. Let me explain what I have in mind: Let's say I have an API on api.contoso.com setting this ...
0
votes
0answers
436 views

Why does bettercap not capture any traffic and why is its web UI just a blank page?

I'm running Debian10/KDE with the nftables firewall enabled on my host machine and would like to test my phone. In the virtual machine I'm running Kali Linux with bettercap and am trying to sniff ...
1
vote
1answer
78 views

Is it possible to spoof a GPS satellite?

If it is possible? Any devices that can be bought to do so. If not, how are GPS satellites are designed to be spoof-free.
0
votes
0answers
38 views

How can you spoof your caller ID? [duplicate]

How can I spoof my caller ID to make it look like someone else is calling for pen testing purposes. Note: I tagged Python because I am trying to make it with Python.
1
vote
1answer
250 views

Can a DNS query source be spoofed?

Will the DNS server reply to the spoofed address if you send a DNS request on behalf of it? What I'm trying to ask isn't DNS spoofing but spoofing the source address.
1
vote
3answers
72 views

What is the best defense for a multi-layered attack: Spoofing, MiTM, Login CSRF?

How would one go about defending against this sort of attack to best protect a sloppy user? There can be obvious signs of a spoofing attack, such as not using SSL, slightly different domain, etc, but ...
4
votes
1answer
219 views

Why can't spoofed caller ID's be identified?

There are several posts here about how easy it is to spoof caller ID and that there is no way to detect it. I did find one post suggesting the calls to 1-800 numbers could not be spoofed. being ...
4
votes
2answers
2k views

Is it possible to mac-spoof Xfinity Wireless?

Background Comcast/Xfinity operates various wireless hotspots across the US, accessed via the SSID xfinitywifi through the many wireless access points shown on https://hotspots.wifi.xfinity.com/ ...
0
votes
0answers
99 views

How does an IMSI catcher “impersonate” a base station/cell tower?

On reading about IMSI catchers, I keep seeing that they "impersonate" a real cell tower or "base station" so that the phone drops its signal-carried data on that machine while on its way to the ...
0
votes
2answers
620 views

What to do if my MAC has been spoofed?

My MAC address has been spoofed by a neighbor to access my WiFi, positively. I know it's futile changing the WPA key or not broadcasting the SSID. What are my options at this point ?
1
vote
0answers
89 views

Is there a way to find out WHO sent me a life threatening text? [closed]

Recently I received several text messages from TWO different numbers that I did not recognize. I called the numbers back, and texted them, but there was no answer, or vm. I googled them as well, and ...
-1
votes
1answer
75 views

Spoof txt and number [closed]

Someone sent me a txt that was old, from a number that I recognize. It originally was from that person months ago, but they erased it. It was resent to me and I was supposed to have sent messages to ...
0
votes
1answer
47 views

Spoofed email: can't determine Purported Responsible Address

I am studying the SMTP protocol and follow a course materials to setup a PoC spoofed email by talking with a SMTP server of our department. This is what I have right now: shuaiw@shuaicpu1:~$ telnet ...
0
votes
2answers
68 views

Can I be reasonably certain that IRS website is genuine? [duplicate]

https://www.irs.gov/identity-theft-fraud-scams/identity-verification I received a letter in the mail indicating that I need to verify my ID with the IRS. Can I be reasonably certain that the website ...
46
votes
4answers
14k views

Someone called someone else with my phone number

Sequence of events: I didn't touch my phone all day (at work, busy day, know it didn't even come out of my pocket, but was on). 5:20pm I get a call by a guy asking me who I am and why I called him at ...
1
vote
1answer
61 views

How do computers store printer presets?

When you connect to a printer on MacOS or Windows, the system stores the printer so you can connect to it later. Does anyone know which criteria is referenced to validate it is the same printer when ...
7
votes
1answer
1k views

How Concerning Is This X-CU-modified: FAKECU Text Attack?

A user clicked on the link of this email and entered their credentials, thinking the message was legitimate. However, the link didn't redirect to the fake site, and instead their mail client sent them ...
2
votes
2answers
2k views

My personal phone sent a text message that I did not send

In an SMS conversation, my friend received a text message within our SMS thread that was clearly not sent from me, and that did not appear in my SMS thread. They took a screenshot and it is in Chinese ...
3
votes
2answers
86 views

How do you know which site credentials are sent to when signing into Oauth site in native apps?

I sometimes use these features where I can use my Google account to sign in to different service providers. For example, the Postman app lets me sign in to it using either their own user store, or ...
0
votes
1answer
472 views

Why does arp spoofing on a local network 'break' internet access for the victim?

I'm doing some experimenting with Kali on my home network and was wondering about something regarding ARP spoofing. When I ARP spoof another device AND the default gateway, Internet access stops ...
1
vote
2answers
524 views

Can the source of an SMS message be spoofed? [duplicate]

My fiancé has a drunkard, terrible ex. She sent me a screen shot of her phone saying he sent her a text but it’s not on his phone. He said he didn’t send it. The number at the top appears to be his in ...
0
votes
1answer
146 views

WiFi security against spoofing attacks

I am about to install some custom pi cameras that connect to my network via WiFi. I know people hack wifi through spoofing SSID. My password is randomly generated and is impossible to brute force ...
0
votes
0answers
54 views

Someone is calling from my number, and its not me? [duplicate]

My number is being regularly spoofed by someone. Today, I got 100 + calls from people claiming I called them. I answered some of the calls they are all locals from my province. I asked my provider ...
1
vote
0answers
34 views

SMS spoofing detection [duplicate]

Our company uses SMS delivery providers like Nexmo etc. We have noticed some of our recipients have received phishing sms messages from fraudsters where the number/sender name was spoofed to match our ...
33
votes
5answers
21k views

Is it possible to spoof an IP address to an exact number? [closed]

The title says it all really. Say my IP address was 1.2.3.4 and I wanted to change or 'spoof' it so that its exactly 2.3.4.5, would this be possible or are there too many varying factors that need to ...
0
votes
0answers
75 views

How to protect from being the spoofed number on caller ID?

The question How to protect from caller-id spoofing? focuses on how to protect oneself from incoming calls with spoofed caller ID information. This question is about how to protect oneself when ...
0
votes
0answers
130 views

Is it possible for a hacker to spoof the internet time, or any HTTP or HTTPs response?

I want to create an application that self-destruct after a certain date ( say: 2022 January 1st). For this I will get the time from the internet, and then compare it with the given date, and if the ...
56
votes
7answers
11k views

How can caller ID be faked?

My late brother was contacted by someone on landline number operated by a carrier in Australia and which displayed on caller ID. I traced the number to a company and though they did call him on a ...

1
2 3 4 5 6