401 Class 43: Sniffing and Evasion - nataliabdallah/codefellows-ops-reading-notes GitHub Wiki

Home | README.md | Portfolio | |

Reading

What is a Sniffing Attack in System Hacking?

sniffing attack is like eavesdropping on conversations between computers on a network.

Explain a Sniffing attack using non-technical terms.

Just as someone might listen in on a private conversation to gather information, in a sniffing attack, special tools are used to 'listen' to the data being exchanged between computers. This can include everything from what websites you're visiting to the passwords you type. The 'sniffer' can then use this information for harmful purposes, such as stealing your identity or accessing restricted areas.

What are the two types of sniffing attacks and what are some pros and cons of each approach?

  1. Passive Sniffing: quietly capturing data packets traveling across the network without altering or redirecting them. Overhearing conversations without the speakers knowing. It's hard to detect because it doesn't interfere with the network's normal operations but its limited on modern networks that use switches to direct traffic.

How does encryption protect traffic against sniffing attacks?

Imagine if the conversation you're eavesdropping on is in a language you don't understand; you might hear the words, but you won't be able to make sense of the information being shared. Similarly, encryption turns readable data into a code that only the intended recipient can decode.