Hot answers tagged

92 votes

How to deal with WPE users

If what you describe is true, your chat room is designed badly. The view of the server and what packets it receives should be forwarded to other users should be independent from whatever packets are ...
user avatar
  • 14.3k
57 votes

Can I prevent my neighbors, whom I pay for shared internet (WiFi), from seeing the sites I've visited?

Yes they can but unless your neighbor has the required technical expertise, its highly doubtful. To view incoming and outgoing traffic you need specific software to monitor network packets and the ...
user avatar
50 votes

How to deal with WPE users

The short answer: use better chat room software. Your question is lacking details about what kind of chat room program you're using. I am going to assume that it's either a simple client-server model,...
user avatar
48 votes

Can I prevent my neighbors, whom I pay for shared internet (WiFi), from seeing the sites I've visited?

If you get a VPN and use that for browsing, that will hide all your traffic from both your neighbour and their ISP.
user avatar
  • 2,996
43 votes
Accepted

Possibility to sniff HTTPS traffic on devices without installing a certificate

The entire point of SSL is its resistance to eavesdropping by man-in-the-middle attacks like the one you're proposing. If you cannot make the client device trust your self-signed certificate, then ...
user avatar
  • 5,780
37 votes
Accepted

Can an HTTPS request be sent twice?

There are multiple mechanisms to detect duplicates. At the TCP level there is the sequence number sent within each TCP packet, which allows to detect if a packet was received twice, or more generally ...
user avatar
31 votes

Can I prevent my neighbors, whom I pay for shared internet (WiFi), from seeing the sites I've visited?

What about using tor? Keep in mind that your speed will be affected. As other people said, using any private mode in your browser is not going to be of any help. EDIT : The slowdown heavily depends ...
user avatar
26 votes

Can I prevent my neighbors, whom I pay for shared internet (WiFi), from seeing the sites I've visited?

Yes they can actually. What it boils down to is that they can see which websites you are running by looking at: Clear HTTP traffic DNS requests sent One thing you could do is purchase an encrypted ...
user avatar
25 votes

How to deal with WPE users

Your question is lacking detailed description of what's going on. Therefore, it's impossible to solve the problem you described. However, it might be helpful to point out a different one. If what you ...
user avatar
  • 2,280
22 votes
Accepted

Sniffing, Snooping, Spoofing

Sniffing and snooping should be synonyms. They refer to listening to a conversation. For example, if you login to a website that uses no encryption, your username and password can be sniffed off the ...
user avatar
  • 356
22 votes

Does https prevent man in the middle attacks by proxy server?

From Philipp C. Heckel's tech blog with some light edits: While attacking unencrypted HTTP traffic can be done without having to deal with X.509 certificates and certificate authorities (CA), SSL-...
user avatar
  • 337
19 votes
Accepted

How can I extract the certificate from this pcap file?

With new versions of wireshark: Make sure the traffic is decoded as SSL, i.e. setup the SSL analyzer for this TCP stream in Analyze >> Decode As. Now it will show the SSL details for the ...
user avatar
13 votes

Can I prevent my neighbors, whom I pay for shared internet (WiFi), from seeing the sites I've visited?

When my laptop is using a network I don't control (basically anything that's not home) it wears pretty red socks to reroute all traffic into the SOCKS5 proxy built into OpenSSH and then to a server I ...
user avatar
  • 615
13 votes

Can I prevent my neighbors, whom I pay for shared internet (WiFi), from seeing the sites I've visited?

In practice, it depends on the router they're using (and, specifically, on the firmware it's running). Basically all home WiFi routers have the technical ability to log visited URLs, as long as their ...
user avatar
13 votes
Accepted

How to know what others browse through the network?

In a WiFi network, all information which is sent over the network is broadcasted over the air. Usually network interfaces are configured to just ignore any network traffic not addressed to them, but ...
user avatar
  • 48.8k
12 votes

Does https prevent man in the middle attacks by proxy server?

Right, the corporate network admins implement a man-in-the-middle attack against the TLS client with their own CA so that they can see what's leaving their network. They will probably have a device ...
user avatar
12 votes

Does https prevent man in the middle attacks by proxy server?

Depending on the configuration of the network that you're on, it may be possible for administrators to view the contents of HTTPS connections (and possibly VPNs). It is obviously possible to ...
user avatar
  • 60.6k
11 votes

Possibility to sniff HTTPS traffic on devices without installing a certificate

Any suggestions? Is is doable? You need to own a certificate trusted by the device to intercept the traffic. How this can be achieved depends on how proper and open the certificate validation on the ...
user avatar
10 votes
Accepted

Is packet sniffing or other manipulation possible at a DSL or cable wire between my modem and the ISP?

Can a DSL or cable wire between my modem and the ISP be manipulated in any way at the hardware level to sniff the traffic data? In theory, yes - the data isn't encrypted and the line code isn't a ...
user avatar
  • 371
9 votes
Accepted

Facebook POST request capture

As you guessed, Facebook uses HTTPS, what that means is that requests to Facebook.com regardless of whether they are GET or POST requests are not sent over HTTP, instead they are sent over HTTPS in an ...
user avatar
8 votes

How can I detect if someone is sniffing network packets on the LAN?

If the system runs the sniffer, its interface will be in promiscuous mode. The test works like this: Send a ping with the correct IP address into the network but with a wrong mac address. The sniffing ...
user avatar
  • 541
8 votes
Accepted

Log all crypto keys used for outgoing SSL / TLS connections on Linux server

The NSS SSL Keylog file is a non-obtrusive way to extract SSL session keys from an application using the NSS library for SSL/TLS, but there is no standard way to do the same in all applications. (A ...
user avatar
  • 5,888
7 votes

wireshark does't show HTTP requests from other devices

Network traffic can be either unicast or broadcast (or multicast, but that's not relevant right now.) NBNS (NetBIOS Name Service) is broadcast, so the switch (your wireless "router" in this case) has ...
user avatar
  • 11.3k
7 votes

Sniffing, Snooping, Spoofing

@Dimitris answer is a good answer. I think the problem can be more clear with some example: Sniffing: Any eavesdropping on existing traffic can be called sniffing, for example you can sniff your own ...
user avatar
  • 265
7 votes
Accepted

promiscuous vs monitor mode in 802.11

In "Promiscous mode", the driver still outputs standard ethernet frames belonging to the one wireless network you are currently associated to (identified by the BSSID). Possibly the device will only ...
user avatar
7 votes
Accepted

Capturing text messages on the fly

Yes. A Harris Stingray, Boeing DRT box, or other cell simulator can intercept SMS messages. These are monitoring devices that have secretly been used by police agencies for over a decade. They ...
user avatar
  • 33.5k
7 votes

Is my router spying on my network traffic?

It most likely checks for updates. I've noticed such behavior in many recent routers: they periodically check their home site for new firmware. If there is a new version available, it will notify you ...
user avatar
  • 8,799
6 votes

Does https prevent man in the middle attacks by proxy server?

The proxy can block https and only allow http from the browser. Then it can initiate its own https connection to pass the requests to the server. Most users will not notice. HSTS is supposed to ...
user avatar
6 votes

promiscuous vs monitor mode in 802.11

In addition to what Michael Karcher said, monitor mode has the advantage of not having to be associated with the AP. This makes it possible to be completely invisible, and to sniff packets on a ...
user avatar
  • 21.5k
6 votes
Accepted

Decrypting TOR traffic?

If you sniff on the exit node and the connection is not https/hidden service, then you will have the traffic in clear but you will not be able to know from who it came. Unless the traffic itself is ...
user avatar
  • 1,104

Only top scored, non community-wiki answers of a minimum length are eligible