|
|
Sniffing Tools
|
|
| Sniffer Scripts |
|
| Sniffer FAQs |
RobertGraham.com Sniffing FAQ ( original, circa 2000 )
IreonGeek.com
ISS.net Sniffer FAQ ( original, circa 1996 ) -- nowhere to be found
- The Following is susceptible to sniffing ( its passwd is clear text )
- telnet, pop3, imap, ftp, snmp, nntp
- Using Secure pop3 and Secure IMAP
- will (?) prevent the the sniffer from seeing your login and passwd
- will NOT prevent the the sniffer from reading your email in clear text
when it travels around the world and comes into or leaves your mail server
- More importantly, ALL unencrypted data is sniffable ( human readable )
- send and receive only encrypted data for a trivial solution against sniffing
- Using easy to guess login and passwd mitgates any encryption
- it takes a few seconds or minutes to guess your passwd
in the "100,000 word dictionary"
- How do you know if someone is sniffing all your data
- your competitors will sniff the incoming email to your mail servers
- They can sniff ALL of your data, login, passwd and all emails
- they can sniff ALL your data from all the routers you passed thru
- they can sniff ALL your data from your ISP
- they can sniff ALL your data from your colo
- they can sniff ALL your data from your local network
- they can sniff ALL your data from your wireless network
- they can sniff ALL your data from your vpn connections at home
- they can sniff ALL your data from the airport, coffee shops, etc
- they can sniff ALL your data from outside your office or home
|
| Sniffer Detectors |
|
| Wireless Sniffers |
|
| Sniffing Across Switches |
Mac Address Spoofing
ARP Poisoning
|
| Network Sniffers |
|
Keyboard Sniffers - Loggers
|
- if they installed a keyboard logger, you're dead ... gameover .. encryption will NOT help either since they can see your passphrase
- if they installed the keyboardlogger remotely, you have other very serious securityproblems
- if they have physical access, game over... just pull the plug and walk out with the PC or laptop with important data on it
thc.org vLogger ( keyboard logger/sniffer )
teso.scen.at iob - kb sniffer
citefa.gov.ar tecleo
PacketStormSecurity.org keylogger
honeynet.org sebek
SourceForge.net lkl
VNC
|
|