Questions tagged [spoofing]

A kind of attack in which one system, program, or user successfully masquerades as another.

Filter by
Sorted by
Tagged with
8
votes
2answers
2k views

dnsspoof not spoofing (requests and forwards real DNS packet)

I was trying to use dnsspoof but it did not work as expected. These are the steps I followed: Set IP forward in kernel to 1 arpspoof -i eth0 -t 192.168.1.39 -r 192.168.1.1 and arpspoof -i eth0 -t 192....
0
votes
1answer
58 views

Why does arp spoofing on a local network 'break' internet access for the victim?

I'm doing some experimenting with Kali on my home network and was wondering about something regarding ARP spoofing. When I ARP spoof another device AND the default gateway, Internet access stops ...
1
vote
2answers
139 views

Can the source of an SMS message be spoofed? [duplicate]

My fiancé has a drunkard, terrible ex. She sent me a screen shot of her phone saying he sent her a text but it’s not on his phone. He said he didn’t send it. The number at the top appears to be his in ...
53
votes
7answers
11k views

How can caller ID be faked?

My late brother was contacted by someone on landline number operated by a carrier in Australia and which displayed on caller ID. I traced the number to a company and though they did call him on a ...
6
votes
2answers
6k views

Is it possible to un-spoof a spoofed caller ID?

I know that Trapcall allows mobile telephone users to forward their calls to a toll free number, which then forwards them back to the user's telephone, allowing them to see the caller ID. However, ...
0
votes
1answer
83 views

WiFi security against spoofing attacks

I am about to install some custom pi cameras that connect to my network via WiFi. I know people hack wifi through spoofing SSID. My password is randomly generated and is impossible to brute force ...
0
votes
3answers
7k views

How a spoofing email site such as emkei works

I'm trying to understand how email spoofing works. After studying the technical process, I have finally understood that : 1)The spoofer will try to scan every ports of a smtp server to catch the mx ...
0
votes
0answers
48 views

Someone is calling from my number, and its not me? [duplicate]

My number is being regularly spoofed by someone. Today, I got 100 + calls from people claiming I called them. I answered some of the calls they are all locals from my province. I asked my provider ...
19
votes
2answers
19k views

List of visually similar characters, for detecting spoofing and social engineering attacks

I'm trying to detect homograph attacks and other attacks where an attacker uses a spoof domain name that looks visually similar to a trusted domain name (e.g., bankofthevvest.com instead of ...
25
votes
3answers
5k views

How wise is it to use a tool for portspoofing at your server to confuse attackers?

I came across this tool recently https://github.com/drk1wi/portspoof How efficient will it be to use it to confuse hackers doing port scanning? If it's actually going to be pretty efficient, why ...
1
vote
0answers
19 views

SMS spoofing detection [duplicate]

Our company uses SMS delivery providers like Nexmo etc. We have noticed some of our recipients have received phishing sms messages from fraudsters where the number/sender name was spoofed to match our ...
0
votes
0answers
33 views

Spoofing phone number [duplicate]

How it's possible spoofing an existing phone number? I have read something about ss7 exploitation, but i'm not sure is necessary. Can someone explain me some theoretical techniques?
32
votes
5answers
10k views

Is it possible to spoof an IP address to an exact number? [closed]

The title says it all really. Say my IP address was 1.2.3.4 and I wanted to change or 'spoof' it so that its exactly 2.3.4.5, would this be possible or are there too many varying factors that need to ...
0
votes
3answers
87 views

How to limit web API microservice communication to specific list of machines?

I have an PHP API that I want to be consumed only by one static website. However the HTTP is not secure as from what I suspect any header can be spoofed (IP - I may be wrong here, domain name, and so ...
0
votes
0answers
59 views

How to protect from being the spoofed number on caller ID?

The question How to protect from caller-id spoofing? focuses on how to protect oneself from incoming calls with spoofed caller ID information. This question is about how to protect oneself when ...
0
votes
0answers
98 views

Is it possible for a hacker to spoof the internet time, or any HTTP or HTTPs response?

I want to create an application that self-destruct after a certain date ( say: 2022 January 1st). For this I will get the time from the internet, and then compare it with the given date, and if the ...
7
votes
3answers
7k views

What is a AUTH-KEY in the security of the computers?

I'm studying security in computers and in particular the URL Spoofing. I understand that a form of URL spoofing is phishing. Then I read that a countermeasure against phishing is the authentication ...
1
vote
1answer
186 views

Apple ID scam, gave control of my computer for a few minutes

I was called from what appears to be a legitimate apple phone number and I was told there was suspicious activity. Then I said I wanted to speak to someone and I was connected to a someone with an ...
2
votes
1answer
504 views

Fake lock screen in full screen browser window

Suppose a desktop OS has a lock screen and fades and locks after inactivity. Suppose the default appearance and inactivity duration are well known (eg consider a default installation of some popular ...
13
votes
1answer
1k views

Did somebody try to spoof my wifi network?

I am traveling on a train in Switzerland, working on a macbook connected to a wifi hotspot that I've set up on my Phone [1] using WPA2. At some point along the journey, the internet connection drops. ...
1
vote
1answer
89 views

MAC Spoofing - Keep victim out

I have successfully done a MAC Spoofing Attack on my open (ad-hoc) network using the macchanger tool (OS: Kali linux). I would like to know what are the common techniques to keep the connection alive ...
13
votes
3answers
10k views

How does SMS spoofing work practically?

I have been researching the web for information on how I can spoof an SMS myself, but I seem to find more on how to detect it, or how to use tools to do it rather on how to do it myself. I have tried ...
0
votes
0answers
188 views

Problems relaying NTLMv2 with Responder and MultiRelay

I'm currently experimenting with mitm relay attacks using Responder.py and MultiRelay.py tool and running into problems. I have the following LAB setup: Kali Box: IP: 192.168.1.13 ...
0
votes
1answer
89 views

How can Ettercap act as a client instead of a gateway?

I am trying to execute an attack that requires a full-duplex MiTM position. This is the reason why I choose to use Ettercap. I have picked DHCP spoofing as the attack of choice. The problem that I ...
1
vote
0answers
74 views

What information for identification does a WiFi router get from a connecting device (Android)? What information can be spoofed?

When I want my device to connect to a WiFi router and make the router not recognize the device I have to change the MAC and the hostname. Is this right? And what information will also be usually ...
2
votes
1answer
2k views

Spoofing the identity of another user in Telegram

In telegram you can setup a unique public username which is available to anyone in the search option, but if you choose not to do that, the only way someone can identify you is by the name you set (ex....
2
votes
1answer
116 views

Smartphone fingerprint plus iris scanning for login

I have often thought about the fact that when intimate relationship partners live together they eventually tend to sneak over your shoulder and gain access to your password on either your mobile phone ...
0
votes
1answer
526 views

NetFlow IP Spoofing/Reflection Attack Detection

Is it possible to detect IP spoofing/reflection attack via NetFlow?
6
votes
3answers
231 views

What if the Google account login screen is spoofed [duplicate]

I am talking about the apps that allow using my google account for login. Nothing against Postman, just using its login screen for example - My concern is that an app could be spoofing this whole ...
3
votes
1answer
568 views

Why is callerID spoofing not possible when using short codes?

The question is already in the headline: Why is callerID spoofing not possible when the destination number is a short code? Here for example the answer to the question if callerID spoofing is still ...
9
votes
4answers
3k views

Spam email “via” my domain, but SPF record exists

I just got an email from some random person's name "via" info@mydomain.com, although info@mydomain.com is just a distribution group within G Suite. We have an up-to-date SPF record added from Google, ...
2
votes
2answers
152 views

Protecting QR Code, Eddystone and NFC against spoofing

Let's say I have the following scenario. I have QR Code, Eddystone and/or NFC which contains IP address, with which, my client side application communicates. Let's say this IP address can vary from ...
11
votes
2answers
84k views

Sniffing, Snooping, Spoofing

Could somebody please explain me the differences between the following attacks? sniffing snooping spoofing My professors used them all in his documents, but I'm not sure, if those are 3 different ...
1
vote
0answers
226 views

Strange inbound MMS messages

We received some strange inbound MMS messages on our Twilio account today. Our account was not compromised, as there are no suspicious outbound messages sent from our number via Twilio. We first ...
0
votes
0answers
17 views

Connect to amazon rds SQL server through spoofed ip address [duplicate]

I'm using amazon MySQL server and grant only my server IP to connect to the database, the question is can someone else access to the database through spoofed IP address and MySQL server credentials?
3
votes
2answers
166 views

How can GNSS spoofing be so easy? Don't the satellites sign their messages?

BBC News reports that a new study accuses Russia of massive GPS spoofing (see also this linked blog article). I am surprised that this is so easy¹, in particular since GPS originates as a military ...
1
vote
2answers
92 views

SPF, DKIM and DMARC - How do receiving/recipient mail servers know how and when to validate the mail?

I have spent a bit of time researching SPF, DKIM and DMARC mechanisms however If I understand correctly, these help the recipient to confirm whether the domain is legitimate but only if they have ...
0
votes
0answers
26 views

anti-spoofing measures for SAQ C business with iPads/NCR silver

So I'm just wondering what types of anti-spoofing measures a SAQ-C business would need: https://www.pcisecuritystandards.org/documents/PCI-DSS-v3_2_1-SAQ-D_Merchant.pdf There's a lot of built in ...
0
votes
0answers
22 views

Is this type of attack possible? [duplicate]

I'm wondering if it is possible for an attacker to spoof his IP address to look like mine. For example, in Facebook's connection logs, would it be possible for an attacker to log into my account while ...
0
votes
2answers
194 views

Websocket connection spoofing

I have a websocket server, where client credentials get validated upon connecting and are never bothered again, since connections are stored in memory. I was wondering, a TCP connection is basically ...
0
votes
1answer
790 views

Tracing email sent from service?

I know an email was sent using the online service emkei.cz. Is there a way to find out who used that service to send the specific email I received?
0
votes
0answers
110 views

Unable to join airbase-ng AP

In a test environment, I am trying to spoof my basic router's Wi-Fi access point using the following: Instructions: https://www.udemy.com/penetration-testing/learn/v4/t/lecture/2693224?start=0 USB Wi-...
0
votes
1answer
77 views

How to track anonomous SMS on your smartphone [duplicate]

I sometimes receive sms from unknown numbers asking me to send money on another unknown number. Is there a way to track the source of such numbers through logs or other technologies or solutions?
0
votes
0answers
388 views

How to trace spoofed phone numbers?

I keep getting scam calls using spoofed phone numbers. Is there a way for me to trace? I have contacted the authorities but they seem to be not as enthusiastic as I am about solving the issue.
1
vote
0answers
173 views

How to defend against adblock detection/adblock subscription leaks?

Is there a best practice (or useful extension) for defending against adblock fingerprinting techniques? I'm not asking about how to bypass adblock detection as such, but rather how one might appear ...
-1
votes
1answer
66 views

Can I spoof a specific AP of a network?

My college wifi requires a certificate installation and also is very unreliable. Therefore, I prefer using my mobile data when I am on campus. But the college has its own app for attendance taking and ...
1
vote
1answer
213 views

ISP's defence methods against IPv6 Spoofing

I read about there being methods applied by ISP's to defend networks against IPv4 spoofing, but not too much about IPv6 spoofing. I'm wondering if someone has some knowledge if ISP's apply techniques ...
23
votes
6answers
7k views

How to be mean to some people that stole my phone [closed]

My iPhone was stolen a couple of weeks ago and I started receiving the following messages on my recovery secondary number that I provided with Find My iPhone: The URLs are: https://apple.inc-view.us/...
0
votes
1answer
402 views

How safe are free SSL - HTTPS cert (fake sites with HTTPS) [duplicate]

I recently heard from one of my friends that we can create our own SSL certificate. So IF I am going to create a fake SSL cert for a fake bank site, its going to auto get HTTPS and say secured in ...
1
vote
2answers
7k views

Email Spoofing by SMTP Message-ID?

Many of my users today got email from docs#@mydomain.com (where docs# was between docs0 and docs8 or so, and mydomain.com is obviously changed from my real domain name), with the sender name of "...