Network Security - securing network infrastructure and connections
-4
votes
1answer
98 views
Am I part of a botnet or hack?
(FYI: my network has been hacked before...see other thread).
I have 2 routers daisy-chained. Router #1 hosts Windows PCs and a VOIP box on subnet 172. Its LAN4 goes to WAN of Router#2, which serves ...
-2
votes
0answers
72 views
History of RAT + Strange networking recently… was I hacked again?
(FYI, my PCs were infected and remote accessed in the past by a friend/stalker, & I’ve reinstalled the network few times already. Recently added Router#2 to double-NAT).
My network has 2 routers ...
-6
votes
1answer
71 views
Hack a LAN with low security [closed]
In our university users have to use VPN to connect to internet.But for local works(like login to university website,checking their university accounts) VPN is not needed.And as I know we have ...
4
votes
4answers
110 views
Block unauthorized user from getting access to intranet
What's the common way to block users from accessing intranet?
Right now, whoever plugs in a cable can access any intranet server freely. I want to change this behavior. But given that we run not only ...
4
votes
2answers
118 views
Security test lab setup [closed]
I want to setup a testing lab in my basement for penetration/vulnerability testing & offensive/defensive security skills. I believe I have all the equipment that I need, and if I'll need something ...
-5
votes
0answers
43 views
Looking for a software that will help me set security policy on my network [closed]
I'm looking for a software that will help me set security policy on my network.
Can anyone please recommend me on some network monitoring & management tool/s that will:
Allow me to block ...
0
votes
1answer
72 views
Securing my firewall (both dedicated and iptables-based) [closed]
I have an ASA-5510, but I also intend to maintain strict IP tables on my server (Ubuntu 12.04.2), so that there are two layers of "protection".
My iptables look like this:
*filter
# Allows all ...
-6
votes
0answers
19 views
vpn connectivity issue with windows XP [closed]
I want to establish a VPN connection, I am getting IP address etc but unable to connect with my Windows 8 Pro but working fine with Windows XP.
-8
votes
1answer
97 views
How IP address are traced [closed]
Let say I have done something harmful to some computer .
I am on wifi at my hostel, so for that session I have some IP assigned. Now,
since tomorrow I will connect again to wifi and get a new IP ...
5
votes
1answer
45 views
User Account Control and outside processes
I was using TeamViewer (a remote desktop client) to log in to a remote computer running Windows 7.
While logged in, the Java updater prompted me for administrator access to run an update check. Out ...
1
vote
2answers
56 views
any reason not to run tmux/wemux on a bastion host?
Is there any reason to worry about running tmux/wemux on a bastion host? It seems to me that it would open up vectors to have your terminal sessions hijacked by some locally exploited account on the ...
1
vote
1answer
50 views
Securing Downloadable Files on Website Per User
I have an ASP.NET website serving up private PDF documents. The PDFs are stored unencrypted on a share on the internal network. The user logs in and navigates to the download page. The web server ...
-1
votes
1answer
58 views
Information Security career guidance? [closed]
I will be completing my BE (Bachelor's Degree) soon. I want to learn security or ethical hacking. One of the options is going for a CEH (Certified Ethical Hacker) certificate and other is course by ...
2
votes
2answers
79 views
What's the difference between an application-level and circuit-level gateway?
From Wikipedia, I understand that circuit level gateways look at TCP handshakes to filter illegitimate traffic and that application level gateways somehow filter application specific traffic.
But I ...
1
vote
1answer
56 views
IPSec, hubs, crypto maps
I thought hubs were layer 1 devices, and so would have no active role in IPSec. I am reading to understand crypto maps,
Dynamic crypto map policies are used in site-to-site VPNs when an unknown ...
3
votes
3answers
96 views
Securing a network attached storage on the internet
I recently purchased a network attached storage for personal file storage and would like my family members to store files on the device from their computers as a remote backup.
I'd like to secure ...
10
votes
5answers
341 views
Alternative to VPN
We have a network that is completely closed to the outside world. It needs to be.
Problem is we need to remote into a server on this network once in a blue moon for diagnostics.
We've discussed ways ...
1
vote
1answer
173 views
Snort/IDS detect and alert on possible DoS/DDoS attack?
As per the title, I'm attempting to configure Snort to detect and alert on a incoming Denial of Service attack.
Looking at the rulesets, which are primarily signature based rules, I can't see a ...
4
votes
4answers
154 views
How to make sandbox-only internet access?
How can I set up my Windows PC and/or network, so that none of the programs on my actual PC have internet access, but i have a sandbox/VM, with a browser, which has internet access, but has no access ...
1
vote
2answers
79 views
Open DNS Dynamic and Static IP
I want to block adult sites not torrents and other.
Currently i am using "OpenDNS Home free". i set those free DNS
208.67.222.222 and 208.67.220.220 in router DNS fields and also i have "OpenDNS ...
3
votes
5answers
136 views
Blocking network access to host(s) at the kernel level in Linux?
Getting it out of the way: Not iptables!
What I'd like to do is block network access to certain IPs, subnets, and/or hostnames at the Linux kernel level, such that no user, including root, could ...
1
vote
2answers
117 views
Is IP Forwarding a risk by itself?
A coworker claims that merely enabling IP_forwarding on a single homed Linux machine poses a security risk as he says it could then be used as a proxy.
I can't think of how this would work, except ...
1
vote
3answers
145 views
How to remote monitor a computer network traffic?
I would like to know if it is possible to remote monitor the incoming and outcoming network traffic of a specific IP from my network. I need to log the time, ip numbers and port that contact the ...
0
votes
0answers
19 views
Is the GTK or MIC in the unencrypted portion of a WPA protected frame?
In order to decrypt traffic you must have all 4 portions of the WPA Handshake. In WPA protected data frames, is there an unencrypted portion of that frame that has some sort of identifiable value to ...
2
votes
2answers
128 views
How can I find the source of traffic allegedly originating from my IP address?
I have a problem that has been going on for at least 6 weeks.
I have Time Warner for my Internet provider and some websites hosted at GoDaddy.
From what GoDaddy tells me the reason I can not view ...
0
votes
1answer
37 views
How to specify a Snort rule connection duration?
Is it even possible to specify into a snort rule the duration of a connection?
For example: in this format Hour, Minute, Second
H, M, S = 0, 2, 1
If a connection that has the duration of 2 minutes ...
2
votes
1answer
84 views
How to add wildcards to snort rule ip address?
Is it possible to add wildcards or something that would function like them to a snort rule IP address?
For example:
If I'd like to detect source-ip of: 192.168.*.9
where the third octet can be ...
2
votes
1answer
71 views
IPSec AH + ESP used together
When ESP and AH are used together (ESP transport, AH transport) on the same packet does ESP encrypt the AH's hash, or is the hash left in the clear?
If the hash isn't encrypted, there are obviously ...
-1
votes
2answers
106 views
How to Block a url not a website
I want to block a single url. I am using OpenDNS now and it is working fine with website blocking on my network but the problem is that i want to block a url like ...
3
votes
2answers
116 views
Organization like OWASP for network security?
Is there something like OWASP for Network Security ? Or have anyone of you come across a testing guide for network security, as to how to start an audit and then the minimum number of tests to run ...
7
votes
1answer
108 views
Using / finding covert channels in inter-process communication
I've got a class exercise that involves a virtual game of Werewolves/Mafia. We're not really taught how to do anything in this class, which makes it hard for everyone to do the labs.
The idea is that ...
-1
votes
1answer
82 views
What service could penetrate my Firewall via UDP on Port 17275?
Has anyone monitored various requests from all over the world on Port 17275 via UDP?
My firewall logs show huge amounts of such requests from lots of different IP Adresses.
I can't find any ...
4
votes
3answers
495 views
Can Skype chat be protected from snooping? Are there safe alternatives?
I use Skype a lot. With all of my clients, staff, contractors and friends, however, the acquisition by Microsoft worries me, as two of my clients are direct MS competitors, and I often work on long ...
1
vote
1answer
140 views
Using a Web Server to steal NTLM credentials
I am trying to design an attack vector against an organization in which the pen tester (myself), steals NTLM credentials through HTTP. I am thinking of these scenarios:
1- I set up a web server on my ...
1
vote
0answers
70 views
Automatic router admin password change [closed]
I feel that this is definitely a hack of some sort and an interesting one.
I am using a Beetel 450TC1 ADSL2+ modem router and here is what I face:
* First, I disconnect the telephone line from the ...
6
votes
3answers
188 views
TCP Sequence Prediction and it's prominence in modern systems/networks
I have a question regarding your experience of TCP Sequence Prediction that I am hoping someone could help with.
I am aware of how TCP Sequence Prediction works and how the connection can be hijacked ...
1
vote
3answers
143 views
How to encrypt packets in network?
I have a simple wireless router to share the internet with single access username/password.
I was wondering if it is possible somehow to set packet encryption so that other people on the LAN cannot ...
3
votes
3answers
154 views
(Windows) Is it possible to catch a virus on my LAN without clicking on anything?
Scenario:
My unpatched PC is connected to a network which contains other "infected" computers, can I get infected by viruses without any interaction on my part?
Many Thanks
-4
votes
1answer
187 views
DoSing my Home Network with only a Public IP address [closed]
+--------------------------------------------------------+
| Client Host Name |.. IP Address ..|.... MAC Address ...|
| Desktop-Home ....| 192.168.1.100 | 00:19:D1:EA:03:68 |
| GT-S5380K ...
-2
votes
1answer
79 views
Why should I use the VPN? [closed]
Does a Virtual Private Network (VPN) provide an encrypted connection from outside networks or from ISPs to the internal network?
3
votes
1answer
141 views
Is it possible that my home router is preventing my ARP poisoning attack?
As part of a school project I am trying to do a MITM attack on my local network using ARP poisoning. I choose a target and then I send a spoofed ARP packet to it and to the router every 100 ...
0
votes
3answers
199 views
How to hide local network traffic on my computer?
I want to hide any traffic an application makes on the local network, make it look like the network is completely quiet to the system and other monitoring software.
Is this doable? How would I ...
70
votes
7answers
4k views
How can I protect my internet-connected devices from discovery by Shodan?
There's been a lot of buzz around this recent CNN article about Shodan, a search engine that can find and allow access to unsecured internet-connected devices.
Shodan runs 24/7 and collects ...
13
votes
7answers
1k views
DDoS - Impossible to stop?
Is it possible - in theory - to stop1 a DDoS attack of any size? Many people claim it's impossible to stop DDoS attacks and tell me I just shouldn't mess with the wrong people on the internet.
But ...
2
votes
2answers
140 views
Prevent unauthorized workstations from joining a Windows Domain
Corporate policy only allows users to connect corporate-issued machines to the network managed by Active Directory. Is there some means to log or otherwise detect when the same user account joins the ...
5
votes
2answers
135 views
Need a software that can monitor and log network traffic of installed applications
I need to monitor and log network activities of a specific software installed on my system.
I know there are lots of network monitoring software out there, even system explorer has one built in.
I ...
2
votes
1answer
54 views
find hardware and OS specs on routers
How do you determine the model and IOS version of a Cisco router, if you have its IP address remotely, but have no physical access. For example, I run nmap -sP and can see the router's IP, but all ...
2
votes
1answer
98 views
What are the vulnerabilities of VOIP-specific security protocols?
Existing relevant questions:
How do you Secure VOIP in a large organization
What are the main issues and best practice security controls when exposing SIP and H.323 to the Internet?
Do secure phone ...
2
votes
1answer
82 views
How do I diagnose client-side SSL errors?
Often on my home network I get random SSL certificate errors when I visit certain well-known sites. Today it was a Google SSL error, where Google apparently tried to identify itself as *.icloud.com. ...
3
votes
1answer
75 views
Suggestions for secure fax SaaS
Does anyone have experience with any fax cloud services, which they can recommend from a security standpoint?
