Questions tagged [sniffing]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
23
votes
5answers
47k views

Sniffing TCP traffic for specific process using Wireshark

Is it possible to sniff TCP traffic for a specific process using Wireshark, even through a plugin to filter TCP traffic based on process ID? I'm working on Windows 7, but I would like to hear about ...
12
votes
3answers
8k views

Reversing network protocol

I have a DVR that sends video over Ethernet using its own propriety TCP protocol. I want to write a VLC module to view the video, rather than the supplied DxClient.exe. I have captured traffic in ...
5
votes
2answers
4k views

analysing IP camera's UDP packages

I have an industrial IP camera and I want to read its images with a micro-controller, but the camera is only operable from a computer running its drivers/firmware. I used WireShark to access the UDP ...
3
votes
1answer
1k views

Sniffing serial Bluetooth traffic on Android

Related to UE Megaboom serial protocol: I am trying to get some insights on the serial protocol spoken by the UE Megaboom, which I suspect is how the app controls the advanced features of the speaker. ...
3
votes
1answer
186 views

Catch connection string between exe and mdb

I have an exe file that read and write from a local DB file. I checked this file with Detect It Easy and it shows that this is a mdb file. I can open this file with microsoft access, and watch all ...
3
votes
2answers
239 views

Interpreting bluetooth string Pebble watch

I am trying to determine the bluetooth string that is sent when programmatically unloading an app from the Pebble watch. I have unloaded an app (in slot 2) 5 times, and got 5 similar but slightly ...
3
votes
1answer
1k views

Analysis of SSL traffic from a Windows 10 application

I have to analyse SSL traffic of an executable under Windows 10. This sounds trivial really, why not just use Burp suite? Using Burp Using Burp I setup an invisible proxy listenning on port 443 and ...
3
votes
0answers
75 views

Logitech UE (Mega)Boom Broadcast Audio

I am interested to build a tool which can stream audio synchronized to multiple UE Boom speakers. UE (Mega)Boom speakers already have the ability to build up a broadcast/multicast domain to play audio ...
2
votes
2answers
1k views

Identifying protocol in a pcap file?

Is it possible to identify a protocol in a pcap file? I have a file which is a capture of data going between my phone and an IP camera, and I'd like to identify the protocol. I am using the app "MEye" ...
2
votes
2answers
3k views

Sniffing traffic of Outlook android app

I have been trying to get the traffic of the Outlook email app for Android to show up in my Fiddler for months with no success. Although some traffic from the app does show in Fiddler, but not all. ...
2
votes
0answers
355 views

What encryption/compression is this, and how to encode/decode from it?

I've been trying to reverse engineer an Android app's communication protocol using a combination of Xposed and Packet sniffing. Most of the packets the app sends have this header set: Content-Type: ...
1
vote
5answers
3k views

Using Stunnel to packet capture HTTPS connection

I want to reverse engineer an application using HTTPS to communicate. I need a tool that performs a man in the middle attack and send it's own SSL certificate to the application, so I can decrypt the ...
1
vote
1answer
460 views

Sniffing TCP packets using Wireshark

I am trying to reverse engineer a decoder. The decoder contains a web server that makes sending/receiving information through the Internet possible. To do so I need to sniff the packets that the ...
1
vote
1answer
39 views

Is it possible to see the traffic on Virtual COM Port to reverse engineer how a device works?

I have a USB device that when connected into the computer ends up showing up as 4 Virtual COM ports in the device manager. As far as I know, two of these are never used. One of them is seldom used and ...
1
vote
2answers
11k views

Sniffing https traffic of an android app

I want to do a challenge: automise some tasks that I do in a game so I can get the max of points. To do that, I need to know the url called and the parameters that are used in the Game. After setting ...
1
vote
4answers
1k views

XMPP clubs in league of legends

Hopefully I'm asking this at the right place. League of legends recently added the option to join a club. Clubs still use the XMPP protocol just like before for their public chat rooms: XMPP for ...
1
vote
1answer
613 views

Reversing checksum algorithm

I am writing a program to control an old camera over serial. I have no access to the protocol or source code of the demonstration program that i have, but i can generate some correct checksums by ...
1
vote
0answers
20 views

Program closes when running Charles proxy

I came across an program that closes itself when I run Charles proxy and if I'm running charles before the progran it won't run. Anyone know what type of security if this and can it be reversed? ...
1
vote
0answers
107 views

Intercepting packets from Electron App to keyboard in Linux

I have a USB keyboard which has an Electron app to set the macros on the keyboard. I unpacked the app.asar file, and the JS files seem to indicate that it is a ReactJS app, and is a minified ...
1
vote
0answers
92 views

Sniffing vacuum cleaner

First of all I'm a noob. I have a basic cheap chinese vacuum cleaner robot. I want to be able to use it from anything but the official app, but I am not intelligent enough to make a custorm firmware ...
1
vote
0answers
112 views

Alternative for Wireshark for USB packet sniffing

I'm looking for alternative for Wireshark, with this requirements: Cross-platform (Windows and Linux) USB packet sniffing Easy creation of dissectors Wireshark is great, but Lua API for writing ...
1
vote
0answers
840 views

Reversing network traffic and rebuild packets

I want to learn something about reverse engineering. I want to rebuild the TeamSpeak connection (client connects to server). I hooked the recv and send + encrypt/decrypt functions and logged the ...
1
vote
0answers
758 views

Log to file WSS Websocket packet traffic

How can I log to file all packet traffic coming from a wss web socket on port 1234 using stunnel, openssl and tcpdump ? I have already seen https://gist.github.com/jeremiahsnapp/6426298#file-stunnel-...
1
vote
0answers
380 views

beginner hardware sniffing question

this is not going to be a specific question but here goes. Ive just started reading about reverse engineering for the 3ds. Is it possible to open the 3ds up and connect a probe somewhere on the chip ...
0
votes
0answers
20 views

Any ways to read out the ICs (using qca4531 or similar packages) without desoldering the chips on this board?

I'm currently evaluating different boards in order to read EEPROM and Flash accesses by attempting to read the bus lines with a logic analyzer. While for SMDs using TQFP (and other similiar packaging) ...
0
votes
2answers
1k views

What functions (in which modules) can be hooked by Frida to access unencrypted data of SSL connections in Java programs running under Windows?

There are gazillions of internet resources discussing how to use Frida to hook and otherwise mess around with SSL connections of Java programs running under Android, but seemingly (as far as my google-...
-1
votes
2answers
495 views

How to sniff HTTPS traffic of apps that ignore system proxy setting? [closed]

I want to sniff and decrypt HTTPS traffic of apps that ignore system proxy setting on macOS. If I understand correctly, common tools like Charles cannot help. How could I achieve that?
-2
votes
1answer
1k views

How to sniff HTTPS traffic of Android apps that ignore the system proxy setting?

I saw a very similar question about this on macOS just 20hrs ago but I'm always needing to do this on Android and I keep forgetting the name of the app. So this is just for reference.