Collaborate Disseminate
I am trying to discover hosts in my network. So I have connected external TPLINK wireless card to my virtual computer for internet and when I do ifconfig, it gives me IP address, 192.168.2.6
I used netdiscover and works perf… Continue reading Does netdiscover spoofs ip address?
I am going to be doing an internal pentest. Is it possible to sniff active directory credentials using Wireshark or Ettercap when a user logs on and authenticates to their domain?
I am going to performing an internal pentest. Is it possible to sniff active directory credentials using Wireshark or Ettercap when a user logs on and authenticates to using their domain credentials?
For WPA enterprise in the corporate world, is the RADIUS server connected to the Authenticator/Access Point wirelessly or ‘wiredly’ for most situations? If they are connected wirelessly, does this mean that it becomes somewha… Continue reading How feasible would it be to sniff traffic between an Authentication Server and a RADIUS server in a corporate setting?
So it is fairly trivial to decrypt 802.11 for WPA-PSK as explained in this link https://wiki.wireshark.org/HowToDecrypt802.11. Is it then possible to decrypt the same way for WPA enterprise?(Assuming that you do know the full… Continue reading Is is possible to decrypt 802.11 for WPA enterprise?
How is it possible to sniff the whole traffic within a network range even if it’s beyond your subnet scope?
For instance, consider your machine having the IP address of 172.16.96.25, but you need to sniff the whole traffic b… Continue reading Sniffing the whole traffic within a network range
We are looking to monitor inbound HTTPS connections for performance issues as well as errors. HTTP requests we are able to gather this information just fine, but we don’t have a way to do this while maintaining PFS via HTTPS…. Continue reading Best options for SSL inspection while maintaining Perfect Forward Secrecy
I would like to understand how it is possible to track location of mobile devices (mostly using SDR -software defined readio, or GSM sniffing).
It is possible to get Cell location using
MCC, MNC, LAC, CellId (CID)
But thi… Continue reading Tracking accurate location with SDR (software radio)
This question already has an answer here:
Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable?
2 answers
I wanted to do some in-house research and check how many and what kind of packets I can capture from/to my in-house open Wi-Fi router.
I had Kali Linux installed on Windows 10 machine (Virtualbox) and I use TP-Link TL-WN722N… Continue reading Wireshark / TCPdump captures only part of HTTP request packets