Questions tagged [spoofing]
A kind of attack in which one system, program, or user successfully masquerades as another.
290
questions
1
vote
2
answers
16k
views
How can someone spoof texts with my phone number?
A dear friend of mine in the U.S. recently told me that she had been quite hurt by the unkind texts I had sent her after the Holidays.
I do not have a texting mobile phone, nor do I do texting from ...
- 39
0
votes
1
answer
415
views
Spoofing domains in Facebook
Over this past week my Facebook's timeline have been flooded by people posting "teenagers sex videos" and tagging a lot of people.
It's common in Facebook to see this kind of malware spreading to ...
user15194
3
votes
1
answer
7k
views
Why is Norton Safe Web flagging my site as dangerous when it reports on PHP files/urls that don't exist?
I'm in a bit of a quandary over Norton Safe Web's rating of my company's website.
My question is: is it possible for someone to fool Norton Safe Web into thinking that our website has PHP files which ...
- 223
3
votes
2
answers
4k
views
Why do email that didn't pass SPF checks go to my mailbox?
I tried a website that supposedly sends spoofed email. I sent myself an email impersonating another email address and the message showed up in my yahoo mailbox even though according to the headers it ...
- 133
4
votes
3
answers
878
views
How will popular WiFi clients react to an evil twin
If I create an evil twin hotspot next to a legitimate AP and simply clone the SSID, I know that my WiFi client will see these as 2 different APs and both will show up in a list of available networks (...
- 215
16
votes
2
answers
4k
views
Are SSL browser sessions kept alive across requests?
When a client requests an SSL web resource via a browser (ie: a login request) and then follows up with additional requests are all the requests executed in the same SSL session? Or does the browser ...
- 311
18
votes
3
answers
6k
views
Somebody is spoofing my email to send spam messages, and I have no idea how to block
Someone is using my Google Apps Email ID to send spam messages and I've received 2000+ undelivered and autorespond emails.
I have no idea how to block this because the spammer is also using my email ...
- 289
3
votes
5
answers
161k
views
Can someone send a text to a phone and make it appear on another person's phone text message?
A friend said her husband was sleeping on the couch, and she got a text that appeared to come from his phone, but he didn't send the text. Is this possible to do, and, how can she trace the origin?
...
- 31
0
votes
2
answers
2k
views
Can someone use IP spoofing to access your facebook profile as an administrator?
Do any IP addresses have security so they cannot be used by a hacker to access secure pages? For example, could a hacker spoof a Facebook IP address to enter someones profile page and make changes as ...
3
votes
1
answer
1k
views
What is the role of IP spoofing in DDoS attacks?
I've read that IP spoofing is often used in denial of service attacks, and I've also just recently read about ingress filtering, which attempts to use blacklisting to filter out spoofed IP addresses ...
- 561
8
votes
2
answers
2k
views
Phone call to try and gain access
About a hour ago I received a call from a suspicious phone number. They explained that they had received an alert from my PC and needed to gain access to correct the problem before my PC was "...
- 1,049
4
votes
1
answer
364
views
Are there any statistics about packet filtering to prevent IP spoofing on the internet?
DDoS attacks via spoofed DNS(sec) are daily news for the last few years, but packet filtering should prevent IP spoofing on the internet.
I tried (as an exercise) to spoof a packet on my VPS and on ...
- 193
15
votes
2
answers
4k
views
How does Google Analytics prevent fake data attacks against an entity's traffic?
In order to register a "hit" on Google Analytics, the list of things required are:
Unique API key(s) for Google AnalyticsPublic: can be gotten from the embedded JavaScript files on the pages for ...
- 672
-3
votes
1
answer
861
views
spoofing with harassing messages [duplicate]
How can you locate the source of spoof calls and texts. I'm having threatening messages and deliveries made from my phone number, but not from my phone to my home and other peoples phones and they're ...
7
votes
2
answers
5k
views
Can you force your PC or device to use only DNSSec-verified lookup results?
Okay, I'll admit something first-off: I don't really understand some of the practical aspects of how DNSSec protections work very well.(Even after reading resources like this.)
Well, I certainly ...
- 2,715
1
vote
1
answer
347
views
"FROM" mail spoofing [duplicate]
I just received a mail from my boss saying someone with my mail has send some request for money. I is kinda serious and I know it is easy to spoof a mail, but the mail is myname@mycompany.com. So my ...
- 121
2
votes
2
answers
4k
views
Is this some sort of scam or do I have stalker?
Sender: msmith11@mail.com
Emails are from IP address:74.208.4.200
Emails are weekly. all text, no links, no images. Some Depict sexual fantasies in high detail directed to a female - which I am.
...
0
votes
1
answer
4k
views
What attacks or exploits are possible when MAC address, IP, and Port of a WiFi access point are known? [closed]
I just accepted a position at a small firm and was testing the previous WiFi setup for flaws and exploits that were possible. We have two AP's for business and guest connections, everything checks out ...
7
votes
3
answers
26k
views
I'm getting spam e-mail...from myself?
I noticed yesterday that I had received spam e-mail, but my own e-mail address was listed as the sender. Naturally, I changed my password. This is probably a spoof, but I don't know enough about ...
- 523
1
vote
0
answers
994
views
How can one tell is a message is spoofed from one phone to another but "about" a third party? [closed]
This question is about whether the source phone number of an SMS message can be spoofed and, if so, what forensic measures might be taken to determine and prove that that has occurred.
Assume that a ...
- 11
4
votes
2
answers
9k
views
Does Visa Checkout have preventive measures against spoofing?
A few online merchants are offering special deals for using Visa Checkout, a payment service similar to PayPal, so I've been trying to learn something about it before signing up. When you are on a ...
- 143
0
votes
2
answers
95
views
Emailing spoofing
I've got 2 macs on a home network, as well as an iphone.
I've got my own domain on Godaddy set up with an SPF record.
I've changed the password on my account.
But emails are being sent using my ...
1
vote
1
answer
3k
views
Does IP Spoofing mean using a proxy?
As said in question, does ip spoofing mean that someone uses a proxy, thereby he/she appears as different ip in the internet world?
- 519
5
votes
2
answers
5k
views
IP address spoofing on internet
On a local network, an attacker can craft a custom IP packet with a fake source IP address and send it to a host. I know that the attacker will not receive a response, but there are still attacks for ...
- 2,289
2
votes
1
answer
1k
views
How to bypass DNS spoofing protection
I know that SSL certificates prevent DNS spoofing, but I was wondering why it is not possible after ARP cache poisoning to set up iptables rules and redirect the origin destination to fake page?
- 51
8
votes
2
answers
3k
views
Spoof IP address after a TCP handshake
I know it is not possible to perform a successful TCP Handshake with a spoofed IP-Address.
However I wonder:
Is it possible to spoof the IP once a TCP handshake was performed successfully?
For ...
- 183
2
votes
0
answers
603
views
How to know our mobile number or phone has been hacked?
We have a Xiaomi Redmi 2 phone and a sim card in it. Yesterday we started receiving angry and swearing text messages. we called the numbers back and apparently a mass angry text messages have been ...
- 21
6
votes
1
answer
4k
views
How to reject e-mails spoofing your own domain targeting your employees at Office365?
One problem Office365 users deal with is that an external SMTP server can spoof the domain of an organization and send e-mails to the domain users; where the e-mails appear to be from employees of the ...
- 905
3
votes
3
answers
34k
views
No SMS Spoofing attack vector in Kali Linux! [closed]
I just realized that there is no SMS spoofing attack vector included in the latest version of Kali Linux. Is there a work around?
- 31
0
votes
1
answer
92
views
Under what circumstance might your email not make to your intended recipient? [closed]
I'm asking because it's one thing to eavesdrop on someone's email, but it's another thing to prevent your email from getting to your recipient. For example, I sent an email to a colleague and he and I ...
- 129
8
votes
2
answers
302
views
Does iPhone home button act as Secure Attention Key?
On an iPhone, does pressing the home button act as a Secure Attention Sequence?
The home button is a physical button. You can press the home button whereever you are and go back to the home screen. ...
- 99.1k
1
vote
1
answer
309
views
Suspicious wifi networks from distant places and hotels
When I check my Macbook's network settings, I see some unfamiliar wifi networks from distant places like famous hotels. It's impossible to connect to those networks because I've never been to those ...
- 111
2
votes
2
answers
4k
views
Difference between DNS spoofing and phishing [closed]
I am writing a bachelor thesis and I am having a hard time figuring out the difference between phishing and DNS spoofing. From what I understand, DNS spoofing is a way to achieve a succesfull phishing ...
2
votes
3
answers
12k
views
How can I spoof source ip address while making a ping request from windows command prompt? [closed]
I am using ping command to test my website which is running on a local server at the moment.
- 23
0
votes
2
answers
156
views
What is the real use of certificates on the web?
When you get a certificate from a website you visit, signed by a trusted CA, is it trust-worthy because the CA authority did a background check on them?
But how does this help with spoof websites?
...
- 123
17
votes
1
answer
3k
views
How to protect from caller-id spoofing?
Yesterday, I listened about caller-id spoofing and was left astonished as its misuse can result in severe consequences for victim.
Please tell me how to protect myself from this prank and is there ...
- 305
10
votes
1
answer
13k
views
802.11w protected management frames - Wi-Fi
I've been reading about protected management frames, introduced in 802.11w, and had a few questions.
Apparently, a message integrity check is provided with de-authentication frames, allowing either ...
- 497
4
votes
1
answer
2k
views
Rogue WPAD server attack
Today I encountered something I have certainly not seen before first hand. Our IDS blocked some outbound traffic attempts from 5 servers with no WAN access. This traffic was leading to an inactive ...
- 59
6
votes
1
answer
41k
views
Is there any way to detect caller ID spoofing? [duplicate]
To be specific the main problem is that I want to detect if the caller ID of the incoming cal I get is real or spoofed? Most VoIP servers now allow their clients to use any caller ID they want. Also, ...
- 71
1
vote
2
answers
2k
views
What makes an SMS gateway insecure?
Is it specifically something about SMS protocol, the proprietary software used to do message routing, or perhaps an ACL on the server? I would imagine that a gateway accepting emails from anywhere ...
- 181
7
votes
1
answer
2k
views
If I know a currently working exploit to spoof SMS on a major carrier, what should I do? [closed]
This currently works on all iPhones and one known android phone as of today, a formal complaint has been filed with the carrier and the FCC. I doubt they will do anything about it though since this is ...
- 181
0
votes
1
answer
170
views
Bogus HostName Causing Suspicion of Man In The Middle
I have servers on a LAN reporting my laptop with a bogus hostname. This is making me suspect a man in the middle attack.
Here are some details:
From an Ubuntu Linux 14.04 laptop, I logged into an ...
- 117
13
votes
2
answers
105k
views
Can I determine actual origin of spoofed text message?
Can I determine the actual sender of a spoofed text message? I received a text message yesterday that appeared to come from one of my contacts, but he did not send it. I contacted my carrier (Verizon) ...
- 131
4
votes
1
answer
9k
views
SMS Spoofing not available in kali
Has the SMS Spoofing option been removed from the Social Engineering Toolkit ? I run 3.14-kali1-amd64. I get only the options shown below. Tried updating both kali and SET but i still dont get the ...
- 43
4
votes
2
answers
1k
views
Data Security on a Malicious WiFi Network
Let's assume that I unwittingly connect to a malicious WiFi network and visit some websites. By malicious, I mean the network has been set up for the purpose of stealing data.
From what I've read, ...
- 143
-1
votes
1
answer
106
views
What are analytics APIs accessing when they run, and how do you block or spoof them?
What are analytics APIs accessing when they run, and how do you block or spoof them?
Usually all apps from desktop or mobile app stores, MMO clients, Steam and many utilities, and many games and ...
- 1
3
votes
2
answers
141
views
Mobile apps and apps store security
This question is with regards to mobile apps and apps stores.
Is it possible to program a mobile app that looks like a legitimate app, say for a bank, with the aim that people will download and use ...
- 715
-2
votes
3
answers
862
views
Basics - IP spoofing
I can't understand why IP spoofing (even basic) is very limited.
Suppose Bob and Alice are about to communicate and Eve can see network communication, why eve can't use IP spoofing for making "Man ...
- 717
2
votes
1
answer
1k
views
Is it possible to cause a DOS attack on a domain by spoofing the DC's NTP request?
According to this page:
Be aware that the Network Time Protocol (NTP) is unauthenticated, and
unencrypted, and it is possible for an intruder to spoof the time root
source, causing the wrong ...
- 1,734
4
votes
1
answer
6k
views
TLS Authentication/OpenVPN/MITM Attacks on Public Wifi [duplicate]
My question is about how an SSL VPN connection such as OpenVPN is protected against MITM/Spoofing attacks on a public Wifi.
For example, if somebody has a 'pineapple' or router setup as a honeypot ...
- 61