Tag: traffic

Decrypt DTLS traffic when using the Cisco AnyConnect Client

I am using the Cisco AnyConnect Client 4.7 to connect to a VPN. I need to decrypt the traffic to examine the packets and understand how VPN works. I have read about providing the PSK to Wireshark, but I can’t find somewhere explaining how to get that when using this Cisco Client.

Additionally, I need to do the same using the discontinued Cisco VPN client which supports IPsec. Again, I don’t know how to obtain the session keys to decrypt ESP traffic.

Just to make clear, I am not trying to perform an mitm attack, I have credentials and am connected to the VPN as a legitimate user.

Does OpenVPN encrypt my traffic between my computer and VPN server?

I set up my own VPN by installing OpenVPN on a Ubuntu server, then I download client.ovpn file from Ubuntu server to my Windows laptop. And then, I import that client.ovpn to OpenVPN GUI app on Windows and finally, I connect to my Ubuntu VPN server and everything work fine.

I installed OpenVPN on Ubuntu server using this instruction: https://github.com/angristan/openvpn-install

So I think traffic flow will be like this:

My computer (browser,...) --> Ubuntu OpenVPN server --> Internet.

Does OpenVPN GUI encrypt traffic between my computer to Ubuntu OpenVPN server?

PCI DSS 1.2.1 Restrict inbound and outbound traffic to that which is necessary for the cardholder data environment

A strict interpretation of that rule would seem to prohibit web browsing by PCs on the same LAN as a card processing PC. However, it appears that rule is interpreted in practice as though it says “Restrict inbound and outbound traffic to that which is necessary for the business environment.” Can anyone provide confirmation or clarification?

Sniffing Traffic Android App

So, imagine that a vulnerable app provides a login interface. This login sends the user’s credentials to the App’s server to authenticate the user. However this is done via HTTP, therefore not secure.

If I were inside the user’s LAN network, I could easily perform a MITM and sniff the traffic and therefore the unencrypted credentials.

The questions is, how can I retrieve the credentials of a specific user by knowing this vulnerability WHILST being outside the network? What kind of practical attack vectors would there be?

  • One could be a malicious but disguised app on the user’s phone which monitors this traffic? (but obviously this would require a way of convincing the user of installing this app and also would count as being part of the LAN)

Quick sale! High Traffic Adult Humor Website 9gag2.com

Here for sale is a popular adult humor website- 9GAG2.COM

It has an established audience built up over 4 years and receives approx. 12,000 daily unique visitors with monthly revenue average of approx. 500 USD (I can provide Exoclick data starting from 2018-01-01).

Please contact me for more info on the website, access to google analytics, advertising info, info on digital transfer, etc.

Why…

Quick sale! High Traffic Adult Humor Website 9gag2.com

High Traffic Adult Humor Website 9gag2.com

Here for sale is a popular adult humor website- 9GAG2.COM

It has an established audience built up over 4 years and receives approx. 12,000 daily unique visitors with monthly revenue average of approx. 500 USD (I can provide Exoclick data starting from 2018-01-01).

Please contact me for more info on the website, access to google analytics, advertising info, info on digital transfer, etc.

Why…

High Traffic Adult Humor Website 9gag2.com

USB thetering kali traffic

I need some clarification for the following scenario

I have a lattepanda connected to an android through spacedesk but the internet (both data plan and wifi is turned off) on the android and only laatepand wifi is on

1 – If connected to a given wifi network can the provider of that network and the ISP connect back to the android IP/MAC?

2 – There is any kind of traffic being originated from/to the android?

Thanks

How do VPN providers exactly encrypt traffic from client to their server?

I’m thinking to build a VPN for personal use on a VPS but am unable to understand one thing. How exactly VPN providers encrypt data from client to their server? Suppose if I simply configure IP of my VPS and port in my browser it would be simple proxy it won’t encrypt traffic that originates from my machine or browser.

If I use OpenVPN would it solve the purpose?

One more thing which I can’t understand is, how do VPN providers exactly restricts usage to a few devices. Do they save device information? If by few devices they mean only X devices can run this VPN in parallel then how do the exactly restrict usage to only X devices because they have limited IPs and tons of users routing their traffic through them and there’s no way to know to know who is using how many devices. If this is mapped to user account and they figure this out via his unique account then technically they are maintaining logs right?