Collaborate Disseminate
I’m currently experimenting with mitm relay attacks using Responder.py and MultiRelay.py tool and running into problems. I have the following LAB setup:
Kali Box:
IP: 192.168.1.13
Domain: none
V… Continue reading Problems relaying NTLMv2 with Responder and MultiRelay
When I want my device to connect to a WiFi router and make the router not recognize the device I have to change the MAC and the hostname. Is this right? And what information will also be usually collected by a WiFi router? An… Continue reading What information for identification does a WiFi router get from a connecting device (Android)? What information can be spoofed?
Here’s a 30-second video you can show your friends and family if they freak out after receiving a scam email apparently from themselves… Continue reading Sextortion mail from yourself? It doesn’t mean you’ve been hacked…
I’m trying to map the threat catalog released by the BSI (german information security department) to the STRIDE methodology.
How could replay attacks fit into the model?
In the CIA goals model I think it’s a threat to Inte… Continue reading STRIDE in context of replay attacks
I am talking about the apps that allow using my google account for login. Nothing against Postman, just using its login screen for example –
My concern is that an app could be spoofing this whole screen to steal my credenti… Continue reading What if the Google account login screen is spoofed
I am trying to execute an attack that requires a full-duplex MiTM position. This is the reason why I choose to use Ettercap. I have picked DHCP spoofing as the attack of choice.
The problem that I am facing is that Ettercap executes the … Continue reading How can Ettercap act as a client instead of a gateway?
We received some strange inbound MMS messages on our Twilio account today. Our account was not compromised, as there are no suspicious outbound messages sent from our number via Twilio.
We first received a message from a Go… Continue reading Strange inbound MMS messages
This question already has an answer here:
Is it possible to pass TCP handshake with spoofed IP address?
4 answers
I’m usi… Continue reading Connect to amazon rds SQL server through spoofed ip address [duplicate]
BBC News reports that a new study accuses Russia of massive GPS spoofing (see also this linked blog article). I am surprised that this is so easy¹, in particular since GPS originates as a military system. Couldn’t such spoo… Continue reading How can GNSS spoofing be so easy? Don’t the satellites sign their messages?
I have spent a bit of time researching SPF, DKIM and DMARC mechanisms however If I understand correctly, these help the recipient to confirm whether the domain is legitimate but only if they have these mechanisms configured c… Continue reading SPF, DKIM and DMARC – How do receiving/recipient mail servers know how and when to validate the mail?