Collaborate Disseminate
I’ve been following the guide:
https://www.comparitech.com/net-admin/decrypt-ssl-with-wireshark/
Using it for chrome and Safari on MacOS does not populate any keys in the file, Did browsers stop keys populating for security reasons or is i… Continue reading Decrypt SSL with Wireshark supported browsers
I’ve been battling with one school task for couple days and can’t seem to find any idea how to solve it. The task is pretty simple:
Log in to the server using SSH. The answer to the task is in encrypted network traffic, which you have the… Continue reading Decrypting network traffic and finding HTTPS private key
I am practicing in these attacks and countermeasures.
I did attack against a computer and it works. I did it against a bridged-network guest VM machine and it does not work. I’m curious about why.
As you can see I receive multiple response… Continue reading DNS Spoofing attack works in host machine but does not work in guest VM machine. I’m curious about why
I’ve an android and ios app. They run on the same application server on Linux. I want to capture the packets when users are trying to log in to the app. How do I proceed? I’m thinking of doing it with tcpdump and putting that pcap file int… Continue reading Capturing packets in an android application or ios application?
I came across a packet capture in Wireshark where p length = 257 bytes and pubkey length = 256 bytes. See the ServerKeyExchange snip below:
Diffie-Hellman Server Params
p Length: 257
p: 00a81c7b6633732007ba19bf733fc5f6cf5d0c9f8e03e… Continue reading DHE key exchange with p value 257 bytes but a pubkey of 256 bytes
I’m learning how to do traffic analysis, and when analyzing this package I found the format and the yellow message strange. Can anyone explain to me what is in yellow?!
[Expert Info (Warning/Protocol): Source MAC must not be a group
addre… Continue reading What is wrong with this Wireshark capture? [closed]
I have a problem. I’m using Wireshark 4.0.8. I created my ssl file to store my "(pre)-master-secrets". I can thus decrypt TLS from my browser or from different python libraries without problem. But I cannot decrypt the TLS when m… Continue reading Wireshark can’t decrypt TLS from a specific python library
I was trying to simulate a DoS attack on the CORE network emulator using hping3 (Ubuntu). The topology is like three PCs connected by a router. The client’s IP is 10.0.0.20/24, The server’s IP is 10.0.1.20/24 and the attacker’s IP is 10.0…. Continue reading How can I verify that my DoS attack is effective?
I understand that the TCP itself provides a byte stream connection, but has no idea nor does it care what its payload is and how it is segmented to fit into individual packets that travel on the wire.
Observing the process in Wireshark, I … Continue reading How underlying protocol, like TLS, determines which TCP payloads should be combined to form a complete PDU? [closed]
Seeing traffic like this on my network and wondering if it’s normal to see IRC being used in macOS push notifications and if anyone has any idea what the apparently escaped code (based on all of the backslashes present) is and/or what it’s… Continue reading Is it normal for Apple push notifications to use the IRC protocol?