Questions tagged [networking]
Any kind of communication between computers using a protocol and the infra-structure that allow this communication.
1
vote
0answers
32 views
Intercept traffic from exe to my Java server
In Windows 10, I can easily intercept traffic of an application using Proxifier and route it to Charles proxy, so that I can inspect and edit the data.
exe -> Proxifier (Socks proxy to localhost:...
0
votes
1answer
85 views
Windows : Which process sent TCP/IP packet?
How do I find out which process has sent TCP/IP network packet?
Are there some tools that can easily do this? Like in Linux.
0
votes
2answers
119 views
How to breakpoint exe tcp packet
I am debugging an executable in windows with IDA.
My exe sends a TCP packet and I want to see which function it uses to send the packets.
I looked on the import tab and haven't found any function ...
3
votes
1answer
128 views
What Checksum/CRC algorithm in RF packet?
I am banging my head to figure out the checksum of a RF device, it seems to be a simple one but no luck so far...
The first 3 bytes is the SyncWord then 9 bytes is the payload and the last byte ...
0
votes
0answers
49 views
How would I go about changing the net code for a multiplayer game?
This game called Europa Universalis 4 is using Steam servers to power their servers also called steamworks. I've used tools like NetHook to analyze the traffic and it seems like the game is just doing ...
1
vote
1answer
133 views
Reverse engineer CAN-Bus checksum
I am trying to figure out a checksum algorithm.
D1 to D6 is data, D7 is a counter obviously and byte 8 must be a CRC, but I didnt have any idea on how to build it. Tried to check if it fits any ...
1
vote
1answer
419 views
Network support when emulating firmware with QEMU
Continuing from this question:
Firmware analysis and file system extraction?
I am trying to run the QNap firmware using QEmu. I have basically the same
firmware as is used in the question above.
My ...
3
votes
1answer
381 views
DGA(Domain Generation Algorithm) based malware files
Where i can get DGA (Domain Generation Algorithm) based malware files for analysis?
And,Can I get malware family names which is using Domain Generation Algorithm?
4
votes
1answer
190 views
How to debug packet processing with overlapped socket on Windows
The problem is quite complex so i don't want to run into unneccessary details.
I have a network application, that communicates with multiple clients at once via UDP. I haven't written it and there is ...
2
votes
2answers
187 views
Getting started with reversing device network traffic
I am interested in starting to decode and understand some proprietary network traffic, sent from apps on various devices, such as my TV, game consoles, phones etc.
Most of the things I want to look ...
0
votes
2answers
370 views
Lutron Caseta Protocol over HTTPS
I have a Lutron Caseta light switch. When I open the iOS app, it connects to lutron.broker.xively.com port 8883. Using a fakedns server I was able to direct that to my server running netcat as follows:...
1
vote
1answer
105 views
Reverse engineer LMTools server status enquiry
We are using FlexLM/Flexera/LMTOOLS (not sure which is the correct) as a licens manager for our Autodesk products. I don't know what version the server is, but I have a fairly old client version, ...
0
votes
3answers
2k views
Limited BusyBox shell
I'm testing some embedded device, and there is lack of documentation. When I telnet to device, I get only limited shell.
BusyBox v1.19.2 (built-in shell (ash)
Enter 'help' for a list of built-in ...
0
votes
1answer
103 views
How does some application get through the block when mobile data plan is exceeded [closed]
I have a mobile data plan of 2 GBs. When I exceed it, I always get redirected to the network operator's website when I trying to load an URL. For some reason Telegram(Android app only, Desktop app ...
1
vote
4answers
808 views
XMPP clubs in league of legends
Hopefully I'm asking this at the right place. League of legends recently added the option to join a club. Clubs still use the XMPP protocol just like before for their public chat rooms: XMPP for ...
4
votes
1answer
231 views
Is this a known encoding or cipher? (multiplayer game network traffic)
I'm trying to decode chat strings in a multiplayer game's network traffic; the way it encodes them is seemingly some arbitrary encoding. I've been analyzing the UDP traffic to the server with ...
1
vote
1answer
205 views
What checksum algorithm is this network protocol using?
I've been working my way through an undocumented TCP-based protocol by monitoring traffic with tcpdump, Wireshark, and some Python packages (scapy, numpy) with good luck so far, but I've hit a wall ...
2
votes
2answers
364 views
Putting an application in between client and server
I'm attempting to reverse engineer (without dissecting the source code, as my understanding is that reverse engineering by analyzing input and output and building something from scratch that fits is ...
1
vote
2answers
435 views
Find the right layer header for a corrupt pcap
So the problem is that i have a corrupt pcap file. You can find a the pcap file [here][1].
First i did the file command on it : the.pcap: tcpdump capture file (little-endian) - version 2.4, capture ...
2
votes
1answer
100 views
Find out how an Android app controls my AV Receiver
I have an Onkyo Audio Receiver (AR), and there is an Android app that I can use to control it, change the volume, the channel etc. As a little project at home, I'm working on an app that can control ...
1
vote
1answer
112 views
Reverse Engineering an iBaby M6
The iBaby M6 is a pretty cool baby monitoring system with neat features. It has Android and iPhone apps but unfortunately, there's no PC interface.
I was thinking that if the camera was broadcasting ...
2
votes
2answers
829 views
Identifying protocol in a pcap file?
Is it possible to identify a protocol in a pcap file? I have a file which is a capture of data going between my phone and an IP camera, and I'd like to identify the protocol. I am using the app "MEye" ...
3
votes
0answers
116 views
Retrieving database credentials with access to an application that can connect and execute
I was asked to help extract information from an old Progress database. I have physical and remote access to both the database server and a workstation with the client application installed. I am able ...
8
votes
3answers
8k views
Guessing CRC checksum algorithm
I am trying to reverse engineer a 16 bit checksum algorithm of one relatively old (10 years) LAN game that is no longer supported nor has source code available.
As it seems, data packets don't have ...
3
votes
1answer
259 views
Reversing a router, single user mode
I'm trying to reverse engineer a binary running on a zyxel router. My first approach would have been to change the password within the .bin firmware itself, but as seen here, I'm having some trouble ...
1
vote
0answers
288 views
Where can i find unix/linux tool for fuzzing for kill-switches? [closed]
I'm looking for linux/unix open-source tools for fuzzing ethernet card for kill-switch packets.
https://en.wikipedia.org/wiki/Fuzzing
I can imagine how it would be long to brute full of range on ...
13
votes
4answers
3k views
Debugging malware that will only run as a service
I'm trying to debug a malware sample that installs to a system as service and then will only start if it starts as a service. Other functions are still available without the service start, like ...
