Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [wireshark]

A free and open-source network and system packet analyzer. It is used for network troubleshooting, analysis, software and communications protocol development, and education.

0
votes
0answers
37 views

Monitor encrypted TCP stream on android app with wireshark

Hello I'd like to monitor all incoming traffic from an android application. It is using certificate pinning and I managed to bypass it with an xposed module and I monitored HTTP(S) traffic of my app ...
1
vote
0answers
48 views

Extracting Firmware file from Wireshark Dump

I updated a device over a firmware update software and sniffed the whole traffic with wireshark. There is a TCP Stream with ~30MB which I exported as raw data. The resulting file is Zip archived data ...
2
votes
0answers
54 views

Joysmade USB/WiFi microscope

Short intro: I am building an electronics workbench, and I needed a microscope. This Joysmade USB/WiFi microscope was $45, and it would work with exception to the below issues. My "dumb" TV was set ...
5
votes
0answers
274 views

Identifying a USB device for a forensics CTF challenge (with no GET DESCRIPTOR)

I'm currently enjoying a forensics CTF challenge. We were provided a PCAPNG file. When opened in Wireshark, the file contains a sequence of URB_INTERRUPT packets from two devices - but no ...
1
vote
2answers
154 views

How to reverse engineer mobile app image?

Scenario On my phone I have an app. When I login into the app and goto my profile there is an profile picture of me. I want to that picture because I need it. Simple way is just goto an local shop an ...
1
vote
0answers
113 views

Wireshark - Bluetooth LE decoding a HCI Log

I have a bluetooth LE home automation style device, that connects to a mobile app. There are 2 values which are updated roughly every second. I'm trying to extract these numbers from the payload. I've ...
0
votes
0answers
718 views

Reverse engineering packets from an old game

Here are the packets when sending a sit command in the game... It seems like the first 2 bytes are the checksum of the packet. They seem to change every time regardless of whatever you are doing that ...
1
vote
1answer
200 views

What checksum algorithm is this network protocol using?

I've been working my way through an undocumented TCP-based protocol by monitoring traffic with tcpdump, Wireshark, and some Python packages (scapy, numpy) with good luck so far, but I've hit a wall ...
1
vote
2answers
422 views

Find the right layer header for a corrupt pcap

So the problem is that i have a corrupt pcap file. You can find a the pcap file [here][1]. First i did the file command on it : the.pcap: tcpdump capture file (little-endian) - version 2.4, capture ...
1
vote
1answer
161 views

Raw numeric data interpretation in Wireshark

In WinHex, I can use the Data Interpreter tool to see the numeric interpretation of data starting from the currently selected byte. This considerably simplifies the initial analysis of the data ...
1
vote
5answers
2k views

Using Stunnel to packet capture HTTPS connection

I want to reverse engineer an application using HTTPS to communicate. I need a tool that performs a man in the middle attack and send it's own SSL certificate to the application, so I can decrypt the ...
13
votes
3answers
8k views

Reversing network protocol

I have a DVR that sends video over Ethernet using its own propriety TCP protocol. I want to write a VLC module to view the video, rather than the supplied DxClient.exe. I have captured traffic in ...
5
votes
2answers
4k views

analysing IP camera's UDP packages

I have an industrial IP camera and I want to read its images with a micro-controller, but the camera is only operable from a computer running its drivers/firmware. I used WireShark to access the UDP ...
16
votes
3answers
29k views

Sniffing TCP traffic for specific process using Wireshark

Is it possible to sniff TCP traffic for a specific process using Wireshark, even through a plugin to filter TCP traffic based on process ID? I'm working on Windows 7, but I would like to hear about ...