Questions tagged [spoofing]

In networking, the term 'spoofing' is used to describe a variety of ways in which hardware and software can be fooled. There are various kind of spoofing such as IP spoofing, MAC spoofing, E-mail address spoofing, Caller ID spoofing, GPS Spoofing etc.

In networking, the term spoofing is used to describe a variety of ways in which hardware and software can be fooled. There are various kind of spoofing such as IP spoofing, MAC spoofing, E-mail address spoofing, Caller ID spoofing, GPS Spoofing etc.

IP spoofing involves trickery that makes a message appear as if it came from an authorized IP address. In computer networking, the term IP address spoofing or IP spoofing refers to the creation of Internet Protocol (IP) packets with a forged source IP address with the purpose of concealing the identity of the sender or impersonating another computing system.

MAC spoofing is a technique for changing a factory-assigned Media Access Control (MAC) address of a network interface on a networked device.

E-mail address spoofing is an act of forging an e-mail header to make it appear as if it came from somewhere or someone other than the actual source. This technique is commonly used by spammers to hide the origin of their e-mails and leads to problems such as misdirected bounces.

Caller ID spoofing is the practice of causing the telephone network to display a number on the recipient's Caller ID display that is not that of the actual originating station.

A GPS spoofing attack attempts to deceive a GPS receiver by broadcasting a slightly more powerful signal than that received from the GPS satellites, structured to resemble a set of normal GPS signals. These spoofed signals, however, are modified in such a way as to cause the receiver to determine its position to be somewhere other than where it actually is, specifically somewhere determined by the attacker.

324 questions
44
votes
10 answers

What is the most reliable way to hide / spoof the referrer in JavaScript?

Normally, the referrer is traceable through: JavaScript's document.referrer The request headers, e.g. PHP's $_SERVER['HTTP_REFERER'] I have set up a Codepad demo which shows these properties, for testing purposes. #Requirements: The original…
Rob W
  • 341,306
  • 83
  • 791
  • 678
21
votes
2 answers

Detect UDID spoofing on the iPhone at runtime

Jailbroken iPhones get on my nerve as it taints some fundamental APIs on iOS, by using MobileSubstrate. http://www.iphonedevwiki.net/index.php/MobileSubstrate I believe many apps use UDID as a mean to authenticate a device and/or a user since it's…
kenn
  • 3,303
  • 2
  • 29
  • 42
20
votes
4 answers

How to detect the original MAC address after it has been spoofed?

We are using the following code for retrieving active MAC address of a windows pc. private static string macId() { return identifier("Win32_NetworkAdapterConfiguration", "MACAddress", "IPEnabled"); } private static string identifier(string…
Sajib Mahmood
  • 3,382
  • 3
  • 37
  • 50
19
votes
2 answers

How does Google Analytics prevent traffic spoofing

We want to embed an ajax style service into a number of our websites each with a unique api key. The problem that I can see is that because the api key is stored in the javascript file the user could potentially take the key, spoof the http…
user103219
  • 3,209
  • 11
  • 39
  • 50
18
votes
2 answers

Preventing cURL Referrer spoofing

We received PHP code from a developer with a web-stats script that relies solely on $_SERVER['HTTP_REFERER']. With cURL, you can easily fake it as follows: curl_setopt($curl, CURLOPT_REFERER, "client website"); and I'm looking for a way to prevent…
demechanico
  • 261
  • 2
  • 12
16
votes
4 answers

MIME Type spoofing

Checking for mime type in php is pretty easy but as far as I know mime can be spoofed. The attacker can upload a php script with for example jpeg mime type. One thing that comes to mind is to check the file extension of the uploaded file and make…
abruski
  • 851
  • 3
  • 10
  • 27
15
votes
2 answers

Spoofing / faking screen-resolution?

While browsing the web, I need to fake my screen resolution to websites I'm viewing but keep my viewport the same (Chrome's or FF's emulating doesn't solve my problem). For instance, if I go to http://www.whatismyscreenresolution.com/ from a browser…
Poky
  • 151
  • 1
  • 1
  • 5
12
votes
1 answer

IP Spoofing in python 3

Is it possible to send a spoofed packet with another ip source? I've searched on the net and I found out that I need to use scapy library. I have this script that I found: import sys from scapy.all import * if len(sys.argv) != 4: print ("Usage:…
Allexj
  • 1,375
  • 6
  • 14
  • 29
11
votes
5 answers

How to disable IP Spoofing check in Rails 4 application?

I'm getting the following error on my Rails 4 application: ActionDispatch::RemoteIp::IpSpoofAttackError: IP spoofing attack?! HTTP_CLIENT_IP="xx.xx.xx.xx" HTTP_X_FORWARDED_FOR="xx.xx.xx.xx" We don't need this type of security check, so after some…
sergserg
  • 21,716
  • 41
  • 129
  • 182
11
votes
4 answers

Session spoofing (PHP)

I am coding a website in PHP that contains the boolean $_SESSION['logged_in']. This is set to true when a username and password match are present in the database. I am quite new to sessions and was just wondering if it could be possible for an…
pulsar
  • 986
  • 1
  • 9
  • 22
11
votes
1 answer

How to setup IP spoofing in jmeter?

I am now load testing a website through jmeter from my machine. But I want a real world scenario , so can ip aliasing or ip spoofing be used by jmeter which will look like requests are being sent from different ip addresses.?
Milind_open_source
  • 141
  • 1
  • 2
  • 11
10
votes
2 answers

cURL request on a page requiring JavaScript support

I need to get the HTML source of pinnaclesports.com. The problem is it detects whether cookies and JS are enabled and if not, it just returns some page saying This site requires JavaScript and Cookies to be enabled. Please change your browser…
user965748
  • 2,227
  • 4
  • 22
  • 30
8
votes
2 answers

How to recalculate IP checksum with scapy?

Possible Duplicate: How to calculate a packet checksum without sending it? I've spoofed a source IP and MAC address in a captured packet, but now I need to recalculate the checksum so that it checks out once its been received (after being…
Mr. Shickadance
  • 5,283
  • 9
  • 45
  • 61
8
votes
3 answers

spoof Plugins for Chrome

Is it possible to spoof Chrome plugins? I noticed that their names are stored in Preferences and Local State file in /Users/mainuser/Library/Application\ Support/Google/Chrome/Default/Preferences and /Users/mainuser/Library/Application\…
potato
  • 4,479
  • 7
  • 42
  • 99
8
votes
2 answers

how to spoof location so google autocomplete API will provide local results, ideally with R

google has an API for downloading search suggestions: https://www.google.com/support/enterprise/static/gsa/docs/admin/70/gsa_doc_set/xml_reference/query_suggestion.html unfortunately, as far as i can tell, these results are specific to your…
Anthony Damico
  • 5,779
  • 7
  • 46
  • 77
1
2 3
21 22