Questions tagged [spoofing]

A kind of attack in which one system, program, or user successfully masquerades as another.

38 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5 votes
0 answers
503 views

How did ntpd get patched to prevent NTP time synchronization attacks?

I recently tested the NTP Time Synchronization Attack as described and demonstrated by Jose Selvi in 2015. Basically, the attack was mostly used to send the victim's clock in the future, so the ...
user avatar
5 votes
3 answers
11k views

What is a AUTH-KEY in the security of the computers?

I'm studying security in computers and in particular the URL Spoofing. I understand that a form of URL spoofing is phishing. Then I read that a countermeasure against phishing is the authentication ...
user avatar
2 votes
3 answers
244 views

How to limit web API microservice communication to specific list of machines?

I have an PHP API that I want to be consumed only by one static website. However the HTTP is not secure as from what I suspect any header can be spoofed (IP - I may be wrong here, domain name, and so ...
user avatar
2 votes
0 answers
367 views

How to defend against adblock detection/adblock subscription leaks?

Is there a best practice (or useful extension) for defending against adblock fingerprinting techniques? I'm not asking about how to bypass adblock detection as such, but rather how one might appear ...
user avatar
2 votes
0 answers
87 views

DNS search lists cause ambiguity, but what are practical examples of this?

Browsers and other Web software tend to allow the system resolver to use the local domain search list when resolving URLs. E.g. www -> www.example.com., if your domain search list is example.com. ...
user avatar
2 votes
0 answers
278 views

How is ARP-spoofing of a Modular CMTS online connection via coaxial broadband even possible?

as one can see on the following screen photos / screenshots, I'm permanently getting ARP-spoofed: My router's MAC adress should be "90:5C:44:E2:8D:24", as can be seen on the screenshot of my router's ...
user avatar
2 votes
0 answers
749 views

DNS Cache Poisoning

I'm in a process of learning how to perform a DNS cache poisoning attack. I run everything on an isolated VM environment, for educational purposes only. The setup is a linux machine with Unbound DNS ...
user avatar
  • 121
2 votes
0 answers
3k views

Microsoft Threat Modeling tool: how to avoid Spoofing of Destination Data Store

I have a threat model with a Cloud Storage entity an Managed Application which accesses it. Here is the diagram: The Microsoft Threat Modeling Tool says in the report that: Cloud Storage may be ...
user avatar
2 votes
0 answers
598 views

How to know our mobile number or phone has been hacked?

We have a Xiaomi Redmi 2 phone and a sim card in it. Yesterday we started receiving angry and swearing text messages. we called the numbers back and apparently a mass angry text messages have been ...
user avatar
2 votes
0 answers
239 views

WPA2-Enterprise - unable to find a way around Lanner Electronics

I have currently been working in an environment where I am connected to a WPA2-Enterprise network requiring me to enter my username and password for the network whenever I connect. I have been asked ...
user avatar
1 vote
0 answers
212 views

Prevent IP session hijacking

I was thinking of the following scenario : a network is behind a router (performing NAT) and firewall this firewall denies all unsollicited incoming packet a user on a computer of the network opens a ...
user avatar
  • 331
1 vote
0 answers
131 views

What information for identification does a WiFi router get from a connecting device (Android)? What information can be spoofed?

When I want my device to connect to a WiFi router and make the router not recognize the device I have to change the MAC and the hostname. Is this right? And what information will also be usually ...
user avatar
1 vote
0 answers
376 views

Strange inbound MMS messages

We received some strange inbound MMS messages on our Twilio account today. Our account was not compromised, as there are no suspicious outbound messages sent from our number via Twilio. We first ...
user avatar
1 vote
0 answers
173 views

Firefox directs me to strange chinese error page, is my security compromised?

Today I was working on a project on my localhost ( I'm a web developer ), when I noticed Firefox is showing a message that means I need to login to my ISP before I can start browsing ( The ...
user avatar
  • 111
1 vote
0 answers
76 views

Which attributes of a WPA AP certificate are used by a client device in deciding if the certificate has been trusted before?

When connecting to a new AP, the client device will pop a warning to ask if the certificate of the new AP should be trusted. If trusted, the warning doesn't show anymore if the certificate is known to ...
user avatar
1 vote
0 answers
1k views

How to detect or check if one device is being used in Mac Address Spoofing attack?

How to detect or check if one device is being used in Mac Address Spoofing attack?? We already check the system... Malwarebytes, Windows AV Scans and nothing is detectec.. also there is any kind of ...
user avatar
  • 11
1 vote
0 answers
337 views

Clicking a spoofed message customised to receivers id from Android

Last night my friend's Skype account(which he stopped using 3 years ago) sent all of his contacts a web spoofed message in the following format www.google.com/something/something/... id= with the ...
user avatar
1 vote
1 answer
144 views

packets coming out of a 10.10 network with 192.168 source addresses

Since there are only a few different source addresses and they are all within valid subnets for the types of routers on our network (mostly netgear & mikrotik), I assume this means that this ...
user avatar
1 vote
0 answers
168 views

call spoofing online server

My friend has an app, in which he dials my number, and on my mobile, I see my own number calling me. He basically spoofs my number. He claims that there are online call services via which we can do ...
user avatar
0 votes
0 answers
75 views

Spoofed iMessage? Apple account breach? What are the possible ways this happened?

See the screenshot below. A friend asked me about this. Person #1 had a group text thread with Person #2 and Person #3. At the top, Person #2 sent a photo and a message. Person #3 replied. Then there ...
user avatar
  • 119
0 votes
1 answer
33 views

Authorizing 3rd Party Envelope Sender to Impersonate Header Sender

Rewriting for clarity: This is regarding emails send from a 3rd party marketer spoofing one of our email addresses in the message header from field. In these emails the envelope sender would come ...
user avatar
0 votes
0 answers
74 views

Loopback source IP Spoofing

Assuming I have a service running with elevated privileges on a host, and another service is listening on a UDP port with access for everyone (0.0.0.0) is it possible to craft a spoofed UDP datagram ...
user avatar
0 votes
0 answers
36 views

How do tracking services stop third party requests?

Facebook Pixel and Google Analytics for example give you an API key to identify tracking requests from your website. But what is to stop someone from grabbing the key, spoofing your domain and ...
user avatar
  • 1
0 votes
0 answers
87 views

What would happen if I ARP spoofed my router

What would happen if I ARP spoofed my router, with that I mean that I make all devices on the network believe that I am the router. As there would be a MAC address conflict would that result in a DOS ...
user avatar
0 votes
0 answers
94 views

How can you spoof you caller id but not using a voip (your carrier instead)?

My research: I found this security stackexchange post but it didn't answer my question. I know that you can do similar things using astresik with voip provider. I came up on o blog that explain that ...
user avatar
0 votes
0 answers
651 views

How does the NSA "masquerade as any routable IPv4 or IPv6 host"?

I was reading the Wikipedia article about TAO and there is written that: Details on a program titled QUANTUMSQUIRREL indicate NSA ability to masquerade as any routable IPv4 or IPv6 host. This enables ...
user avatar
0 votes
1 answer
314 views

Spoof IP address after a TCP handshake established

Is it possible to spoof the IP once a TCP handshake was performed successfully? For example: Perform the handshake Use the session with the same IP which performed handshake but on different machine ...
user avatar
0 votes
1 answer
225 views

Redirection - Different Website from Different Computer

There are URLs which its only purpose is to redirect the HTTP requestor to a correct website. Say, if I tried to access example.com/0wa/RaNd0m from my computer, it would redirect me to wikipedia.com. ...
user avatar
0 votes
0 answers
190 views

How does an IMSI catcher "impersonate" a base station/cell tower?

On reading about IMSI catchers, I keep seeing that they "impersonate" a real cell tower or "base station" so that the phone drops its signal-carried data on that machine while on its way to the ...
user avatar
0 votes
0 answers
118 views

How to protect from being the spoofed number on caller ID?

The question How to protect from caller-id spoofing? focuses on how to protect oneself from incoming calls with spoofed caller ID information. This question is about how to protect oneself when ...
user avatar
  • 556
0 votes
0 answers
181 views

Is it possible for a hacker to spoof the internet time, or any HTTP or HTTPs response?

I want to create an application that self-destruct after a certain date ( say: 2022 January 1st). For this I will get the time from the internet, and then compare it with the given date, and if the ...
user avatar
  • 905
0 votes
1 answer
269 views

How can Ettercap act as a client instead of a gateway?

I am trying to execute an attack that requires a full-duplex MiTM position. This is the reason why I choose to use Ettercap. I have picked DHCP spoofing as the attack of choice. The problem that I ...
user avatar
0 votes
0 answers
63 views

anti-spoofing measures for SAQ C business with iPads/NCR silver

So I'm just wondering what types of anti-spoofing measures a SAQ-C business would need: https://www.pcisecuritystandards.org/documents/PCI-DSS-v3_2_1-SAQ-D_Merchant.pdf There's a lot of built in ...
user avatar
0 votes
0 answers
620 views

How to trace spoofed phone numbers?

I keep getting scam calls using spoofed phone numbers. Is there a way for me to trace? I have contacted the authorities but they seem to be not as enthusiastic as I am about solving the issue.
user avatar
0 votes
0 answers
94 views

Can GPS Spoofing enhance your privacy or are there other variables to also look at

With more and more devices and applications pulling meta data like GPS, does GPS spoofing add any value to protecting your privacy or are there other variables that also need to be taken in to account ...
user avatar
  • 3,086
0 votes
0 answers
833 views

"[!] Something went wrong.. Try again" sendmail with setoolkit in kali behind tor

I've been working in a little project, and the goal right now is spoof an e-mail address. That simple, but doing it in an elegant way. I've done the following, using Kali on a VM (in VirtualBox) I ...
user avatar
  • 101
0 votes
1 answer
120 views

DNS local cache spoofing with malware or RAT

I was learning networking and knew that browsers don't have algorithms to convert domain names to IPs. It queries a DNS server. After that, the computer remembers the IP, so next time the domain is ...
user avatar
  • 119
-1 votes
1 answer
259 views

Can I spoof a specific AP of a network?

My college wifi requires a certificate installation and also is very unreliable. Therefore, I prefer using my mobile data when I am on campus. But the college has its own app for attendance taking and ...
user avatar