Collaborate Disseminate
I have an IOT System that works the following way:
The IOT bridge makes a TCP Handshake with a server in china with a static ip address 47.255…
(bridge sends syn the china server sends syn ack and then bridge ack)
Then the bridge sends M… Continue reading Redirect Ip Address (not dns) with Router [closed]
Background
In a standard 48-bit MAC address, the 7th (most significant) bit specifies whether it is a universally-administered address (UAA) or a locally-administered address (LAA).
If it is 0, then the MAC address is a UAA and the first 2… Continue reading Are there security reasons for prohibiting universal mac address modification?
I’m new to hacking so please don’t bash me on the replies. :'(
Trying to arpspoof my own windows machine (not vm), the guide I’ve watched tells me to check the arp -a on windows cmd before and after arp spoofing and that if the MAC adress … Continue reading arpspoofing doesn’t work for some reason?
What if a ddos attacker hits public websites (google, amazon etc) with some requests but spoofed the souce ip to the victim’s ip. Now the responses will be sent to the victim’s ip.
Attacker can rotate between the millions of public website… Continue reading DDoS using websites instead of bots?
I’ve recently been trying to spoof my mac address and I tried every way but it still doesn’t work. I’ve tried to change it from the terminal and other applications. Although it says it was successful on the terminal and says it has changed… Continue reading Mac Spoofing Not working on MacOS
My question is about security groups/firewalls and protecting a virtual private cloud from the external world. Here is a description of VPC default policy for inbound/outbound traffic (on AWS):
Each security group by default contains a… Continue reading Circumventing inbound traffic rule by faking reply traffic
I have some troubles to understand how the header “Access-Control-Allow-Origin” can really be secure. Let me explain what I have in mind:
Let’s say I have an API on api.contoso.com setting this header: Access-Control-Allow-Origin: https:/… Continue reading Access-Control-Allow-Origin and security behind it
I’m running Debian10/KDE with the nftables firewall enabled on my host machine and would like to test my phone. In the virtual machine I’m running Kali Linux with bettercap and am trying to sniff traffic from my phone connected to the same… Continue reading Why does bettercap not capture any traffic and why is its web UI just a blank page?
If it is possible? Any devices that can be bought to do so.
If not, how are GPS satellites are designed to be spoof-free.
How can I spoof my caller ID to make it look like someone else is calling for pen testing purposes.
Note: I tagged Python because I am trying to make it with Python.
Continue reading How can you spoof your caller ID? [duplicate]