As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [spoofing]

A kind of attack in which one system, program, or user successfully masquerades as another.

Filter by
Sorted by
Tagged with
6 votes
2 answers
487 views

Have both my email address and IP been spoofed, or has someone gotten my password, or...?

Just examined a spam email sent to me. The header's "originator" has both my email address and my web site's IP address, (my SMTP). My first thought is that someone has obtained my email password ...
BarryEm's user avatar
  • 61
2 votes
0 answers
242 views

WPA2-Enterprise - unable to find a way around Lanner Electronics

I have currently been working in an environment where I am connected to a WPA2-Enterprise network requiring me to enter my username and password for the network whenever I connect. I have been asked ...
user3801447's user avatar
0 votes
1 answer
925 views

Maximum number of Requests in HTTP keep alive connection

We are running a network analyzer . And we log info which are in the HTTP request headers and HTTP response code. Because in keep alive connection request may come without responses. I push requests ...
Kadir Erdem Demir's user avatar
2 votes
1 answer
17k views

What is TCP spoofing?

I know about IP spoofing is it the same thing? The question originated from the question Is TCP more secure than UDP?
Ulkoma's user avatar
  • 8,783
3 votes
2 answers
3k views

WiFi Hotspot's Evil Twin

So an Evil Twin Wifi hotspot is a hotspot with the same SSID and/or same MAC that when the victim auto-connect to this hotspot, all traffic go through this evil twin and thus the information ...
Derek 朕會功夫's user avatar
5 votes
2 answers
6k views

What happens when a spoofed source IP packet is dispatched out of a private network with NATing

Suppose as an attacker i want to carry out a Ping or SYN Flood attack.. I can change the source IP of the packets generated at my machine to a false/spoofed public IP address so that replies go to ...
riteshtch's user avatar
  • 151
2 votes
1 answer
5k views

How to tell computer of origin sending email messages? [duplicate]

I’m not a security expert. I wasn't sure if I should post this question here or in "exploit". I have searched for answers before posting.... Could anyone tell me how I can determine if emails are ...
rhimbo's user avatar
  • 21
1 vote
2 answers
241 views

is this secure: email account that can only be accessed by sending and receiving emails within gmail

i am creating a game of sorts where you use and earn credits to accomplish tasks. I am curious if you can effectively use gmail's security features to secure these submissions if the emails are all in ...
Michael Holt's user avatar
4 votes
3 answers
905 views

How can spoofing a certain MAC address enable sending probe requests that I was never connected to?

I was wondering how could my computer that uses a spoofed MAC address be sending probe requests for APs that I was never connected to? Note:- The other computer with the original MAC address was ...
peter b's user avatar
  • 51
9 votes
2 answers
4k views

Can an SSH server fingerprint be spoofed?

If I simply connect to an SSH server, get its key fingerprint, and immediately disconnect, does the SSH protocol ensure that the server also had the private key in order to get that far into the ...
Belorn's user avatar
  • 93
0 votes
2 answers
9k views

Can a spoofer intercept my email, insert text and send it on?

I send money to a charity in Africa. Recently my contact gave money to a third party, he said at my request. As proof, he forwarded back my email, and sure enough, some text had been added instructing ...
Sally's user avatar
  • 11
-2 votes
1 answer
369 views

How do i defeat cell phone spyware? [closed]

I've bought a new phone, where one of its products can be activated by receiving a phone call. If someone uses a spoofed SIM card - with a number I recognize - I'll likely answer the call. Are there ...
Iggy's user avatar
  • 1
2 votes
3 answers
500 views

Security concerns with TCP holding onto out-of-order packets?

Consider the following... Alice and Bob are communicating over TCP. Currently, the next expected TCP sequence number is 1000. Charlie, pretending to be Alice, sends a spoofed TCP packet to Bob with ...
ansichart's user avatar
  • 777
5 votes
3 answers
11k views

What is a AUTH-KEY in the security of the computers?

I'm studying security in computers and in particular the URL Spoofing. I understand that a form of URL spoofing is phishing. Then I read that a countermeasure against phishing is the authentication ...
user2081013's user avatar
0 votes
1 answer
1k views

Detect possible router attack attempt

I have huge problem with my router: Sagem F@st 3202. Here are some Security log events: Inbound Traffic | Blocked - Default policy | TCP XX.XX.XX.XXX:80->XX.X.XX.XX:51707 on ppp0 [repeated ...
David's user avatar
  • 3
2 votes
1 answer
1k views

DOCSIS modem only authenticated by MAC?

Is a DOCSIS modem only authenticated by the CMTS by a MAC address or are there any other AAA techniques? In that case, how do I prevent other customers from spoofing my modem's MAC address? Cable ...
user2964971's user avatar
41 votes
2 answers
152k views

How easy is it really to do IP spoofing? [closed]

I read a lot about IP spoofing but I am not sure how easy it is really to do. Let's say I am in Spain, can I somehow connect to a server in the US with an IP address that is allocated to Mexico? Won't ...
Simd's user avatar
  • 587
0 votes
1 answer
163 views

Safely creating and communicating within a fully decentralized p2p network

I'm not entirely sure if this is the right place to ask this, and I'm also slightly fuzzy on how the p2p system works, so correct me if I'm wrong. I've been looking into the practical implications of ...
Dylan Katz's user avatar
13 votes
2 answers
98k views

Sniffing, Snooping, Spoofing

Could somebody please explain to me the differences between the following attacks? sniffing snooping spoofing My professors used them all in his documents, but I'm not sure, if those are 3 ...
user1170330's user avatar
3 votes
1 answer
675 views

WPA2 enterprise credentials involved in encryption?

Since encryption keys are session-based in WPA2 enterprise, if person A obtains person B's credentials, will person B's encryption key still be safe? Is there any way person A could use person B's ...
raladdin's user avatar
0 votes
1 answer
668 views

NetFlow IP Spoofing/Reflection Attack Detection

Is it possible to detect IP spoofing/reflection attack via NetFlow?
Bruce's user avatar
  • 1
1 vote
2 answers
10k views

Email Spoofing by SMTP Message-ID?

Many of my users today got email from docs#@mydomain.com (where docs# was between docs0 and docs8 or so, and mydomain.com is obviously changed from my real domain name), with the sender name of "...
armani's user avatar
  • 2,658
1 vote
1 answer
470 views

Spoofing and guest network security

I know a little bit about network security but it's only about enough to know there's a lot I don't know. My requirement is to add a 2nd wifi to my current setup (1 wifi emitted by a 1-physical-wifi-...
rmanna's user avatar
  • 165
2 votes
2 answers
839 views

Isolating guest networks

I'm setting up a secondary guest wifi on my router and I want to make sure that it's impossible for clients connected to the guest wifi to access my primary network. Initially, I used IP filtering ...
rmanna's user avatar
  • 165
3 votes
1 answer
215 views

Tracking down the source of email attacks

For the past week our company's IDS has been blocking 100-200 meeting invite emails per day from a specific client that are loaded with buffer overflows targeted at Exchange 2003. The payloads are ...
thanby's user avatar
  • 183
6 votes
3 answers
8k views

Which is safer, GSM or CDMA?

I have read in the past (no sure where) that unfortunately there exist illegal devices that permit crooks to eavesdrop on GSM mobile phone conversations. I recently also heard that some people had ...
Friendly's user avatar
  • 207
4 votes
1 answer
2k views

What is setuid based script root spoofing?

I'm reading this and I'm little confused. What exactly is this setuid based script root spoofing?
Tom's user avatar
  • 43
5 votes
1 answer
45k views

How to track a Spoofed SMS on Iphone

A mate pulled a quality prank on me the other day by sending me a SMS via a Spoofed number. He's bought a SMS gateway and can set the message ID/phone number to be 'God' (or whatever he wants(letters ...
NULLZ's user avatar
  • 11.5k
0 votes
2 answers
2k views

Can you trust the URL shown when 'hovering' on a link? [duplicate]

When using a modern web browser, if you hover on a link, the browser will show you the link in a little display on the bottom left corner of the browser screen. Can I trust this? Can this display be ...
D.W.'s user avatar
  • 99.1k
4 votes
2 answers
1k views

Why would someone create an OpenPGP public key with my name and email address?

By chance, I typed gpg2 --search myemailaddress on the command line, and searched public keyservers for my email address (I'd actually just meant to search my local keyring, for which I should have ...
bgvaughan's user avatar
  • 149
0 votes
1 answer
10k views

Show another number when calling mobile phone [duplicate]

Nowadays I heard that some cheaters make mobile calls to steal banking & other private information.They show private numbers like 911 to their victims. Is it possible show different number to ...
dgn's user avatar
  • 124
4 votes
2 answers
5k views

Is this a valid Windows update page

In my chrome browser if I google for Windows Update the first hit is windowsupdate.microsoft.com/‎ When I click on it I am redirected to http://www.update.microsoft.com/windowsupdate/v6/thanks....
Toby Allen's user avatar
4 votes
1 answer
201 views

Known examples of spoofed Change Request?

A Change Request from a client (in the commercial sense of the word) to an organisation supplying an IT system to that client, can add or modify requirements for that system. Are there any known ...
D.H.'s user avatar
  • 628
24 votes
1 answer
17k views

How can I spoof a phone call and make it appear to come from another phone?

I'm performing a penetration test against a company. Part of my social engineering procedure is to contact the IT department and try to convince them to that I'm an employee in the company and get ...
Adi's user avatar
  • 43.9k
20 votes
3 answers
137k views

Is it possible to make a phone call appear to come from another phone, even to the network provider?

Quick Question Is it possible that I could call a mobile number, but have the call forwarded through another number active on a different phone that someone else has? I have had unlimited access to ...
Peanut's user avatar
  • 1,019
2 votes
1 answer
2k views

External network DNS spoofing

I've been thinking recently if its possible to DNS spoof an external network. Let's say for example you are attacker.com and your victim is of course victim.com. Then I've thought of 2 scenarios: 1. ...
olipinski's user avatar
2 votes
1 answer
4k views

Is it possible for someone to send a spoofed text message via iMessage to my iPhone4?

After the reports of the SMS spoofing security issue Apple released a statement claiming that the iMessage system was 'secure' and should be used to prevent text spoofing. I have received several ...
Nova's user avatar
  • 29
12 votes
1 answer
26k views

DNS Spoofing vs DNS Cache Poisoning

What is the difference between DNS Spoofing and DNS Cache Poisoning ??? It seems like there are little differences between two attacks, with an exception that DNS server is actually might cache the "...
newprint's user avatar
  • 223
3 votes
3 answers
7k views

How to detect & prevent fake emails?

I hope this question not same as this one: E-mail can be made to appear like it came from a big organization? I'm not asking how to protect brands and large organizations (Google, Yahoo, etc.), but ...
HSN's user avatar
  • 1,208
3 votes
1 answer
2k views

Can I check if a work colleague logged into my user account on a shared computer?

I think that someone at work has logged onto my user account when I'm not in work and moved some files from my desk top to my work in progress. Can this happen? They may know my user name as this is ...
jaime's user avatar
  • 31

1 2 3 4 5
6