Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

0
votes
0answers
33 views

Reverse TCP Shell not working on separate network [on hold]

I made a Reverse TCP Shell in Metasploit. Set the LHOST for my Local IP: 10.0.0.27 Then set the port for 4444. When I run it on my network and it works. I transfer the file to another network. Run ...
0
votes
0answers
24 views

Netcat seems to close the connection from the attack box?

I am trying a practice box, and am running into trouble stabilising a connection. I have an RFI vulnerability that allows me to run commands on an Apache server, but does not lead to an interactive ...
0
votes
0answers
22 views

DMZ with Reverse Proxy for both Web and Email servers

I have both a web server and email server, instead of placing these two "public" servers in the DMZ, instead In the DMZ I was going to place a Reverse Proxy. for the Web Server: Firewall accepts port ...
0
votes
0answers
41 views

Surveillance cameras go offline every 30 minutes or so

I'm setting up a 4 camera security system with an Anran Digital Video Recorder (Model NVR6008T), and keep having the cameras go offline approximately every 25-30 minutes. They stay offline for ...
0
votes
0answers
40 views

Firewall source and destination IP validation

For an external firewall interface, why is it a good idea to validate that the source IP address was initiated from an internal IP, or why it originated from an external IP? If, hypothetically, the ...
-1
votes
1answer
69 views

Best option for DDoS protection on DigitalOcean server?

I would not like to use CloudFlare since they effectively act as a man in the middle and handle unencrypted data. Is there a CDN that mitigates the security risks that CloudFlare imposes? If not, is ...
2
votes
1answer
67 views

Man in the Middle attack?

in a scenario where I have a gateway to the Internet and a switch(layer 2) connected to this gateway. I have two computers in the same broadcast domain connected to the switch. all traffic to the ...
1
vote
1answer
38 views

using VLAN to mitigate ARP poisoning

hi I have been told VLANs can help mitigate ARP poisoning because they can be configured with different broadcast domains. and arp works using a simple broadcast domain. can someone explain how the ...
0
votes
1answer
39 views

open network access, common problems?

what are some common problems for companys who offer "guests" - people that word for a different company at the first companys building - internet access? my guess would be easy to sue downloads like ...
-7
votes
0answers
63 views

How can I hide my activity from our network or IT admins at university or especially work? [on hold]

I both work and study. I recently found out that I am being monitored. I have the fear that the administrators can easily read my emails and have access to my passwords. For work sometimes I have to ...
-1
votes
0answers
38 views

Could you reccomend me a book about Metasploit Framework? [on hold]

I am doing some pen testing and recently encountred Metasploit Framework. I would like to try it or better learn to use it, but wasnt able to find any good book. I found few but they were like 10 ...
1
vote
1answer
69 views

How safe is to leave a open port on router without anything listening to it?

I'm using plex remote, and I have a double-NAT on my local network, so I need to open ports on the two routers. As far I know, I have made secure connections to be required. And I don't plan to ...
0
votes
1answer
44 views

understanding where tor interferes (screenshot)

with just goal to better understand where tor interferes and where it hides my browsing from ISP, please look at this picture which just explains how to computers communicate. You can check on step ...
0
votes
3answers
120 views

How a professional hacker would penetrate a computer in a network?

Which kinds of vulnerabilities or security holes a hacker would use to penetrate and take over a computer in a network, like a normal PC in a default network (Wireless-LAN). I often hear that the ...
0
votes
0answers
29 views

rdp connection with netcat pivoting

I want to connection from local computer to another local computer. I have 3 machine. for example A: 192.168.1.50 -> in local windows machine B: 50.3.52.110 -> linux server C: 192.168.5.25 -&...
0
votes
2answers
83 views

Hiding my activity from mobile service provider [duplicate]

Ok there is mobile service provider which also happens to be providing mobile internet. Now, I am interested to hide my activity from that provider. e.g. it can't see my browsing habbit. Basically ...
1
vote
1answer
32 views

wpa_passphrase command encrpyting psk

Does the wpa_passphrase command turn an ASCII string into hexadecimal and what is the benefit of doing so? Is the psk sent in the header of packets? Can it be easy to sniff if it's in a string format? ...
0
votes
1answer
44 views

How to sniff 802.11 packets without going into monitor mode?

Is it possible to sniff or capture 802.11 packets which sends my computer to the router (AP). I know that I can't sniff packets which have a other destination MAC address without going into monitor ...
-1
votes
3answers
108 views

Jump Servers for security

In my network, I have the clients directly connected to the server; but in the new PCI policies, they required to use jump servers. What is the advantage of using jump servers for security reasons? ...
-3
votes
0answers
40 views

How can one track the origin of an image shared in Whatsapp? [closed]

How can one track the origin of an image shared in Whatsapp?
0
votes
1answer
37 views

Authentication in WPA from a user's perspective

I have read several articles that discuss the differences between WEP and WPA but I haven't seen an answer to my question, which is : How is the authentication used in WPA different from that used ...
4
votes
3answers
239 views

Can CloudFlare be DDoS-ed and issn't the actual DDoS mitigation limit, financial resources?

CloudFlare (known for fighting DDoS-attacks) is explaining quite a lot about DDoS on their website cloudflare.com/ddos. In an article named The DDoS That Almost Broke the Internet they write about a ...
3
votes
0answers
40 views

Is filtering flash based on the mimetype enough to keep it out?

As flash is a real security mess I started blacklisting flash at our proxy by blocking any content with the mime type application/x-shockwave-flash which works pretty well as far as I can tell. The ...
3
votes
2answers
72 views

As an end user on a network, how can I avoid being MITM'd by an SSID-spoofing device?

I've been looking at SSID spoofing devices lately, including the Wi-Fi Pineapple and similar hardware. While these types of devices seem very useful to someone who's up to no good or working as a ...
0
votes
3answers
95 views

Understanding a DMZ with multiple servers

I get the general principle of a DMZ i.e. place public facing servers in the DMZ to isolate and protect the corporate LAN. I have a web application which is to be public facing, this web app needs to ...
-1
votes
1answer
60 views

Using old router as wi-fi extender/extra security on shared network?

I just moved into a building with three apartments, all of which split an internet subscription. There is only one router, however, in one of the other apartments. For security/privacy purposes, I'd ...
1
vote
2answers
75 views

What phases does a network penetration test consist of?

What are common phases of a network infrastructure penetration test? Staring with discovering IP's and ports? A simple vulnerability assessment, checking version information of banners from different ...
2
votes
2answers
49 views

Relaxed access to tcpdump

I'm looking to do some packet sniffing on a computer that I do not have privileged access on. I am considering asking the admins to allow users in a specific group access to tcpdump. Specifically, I ...
25
votes
2answers
5k views

How can my IP camera be hacked behind a NAT?

I keep reading about hackers accessing laptop and home security camera systems. Most home users are using SOHO routers meaning they are on a private IP range behind a NAT. I realize NATs aren't ...
0
votes
1answer
78 views

What path (programming language, courses) should I take inorder to become a network/ security developer. (Not network configuration)? [closed]

I would want to work in network and network security field as a developer(programmer),developing network products(not network/network product configuration) ultimately to get into network security ...
0
votes
2answers
91 views

What is the likelihood of a NAS getting hacked? [closed]

I'm looking at NAS (network attached storage) to use as one of several backup storage devices to store my data, since I cannot find a DAS (direct attached storage) with RAID functionality (all of the ...
0
votes
2answers
64 views

See the traffic from my own Android phone

My employer (a Dutch university) gave me an Android phone. I am not allowed to root it. Still I want to know what traffic goes through it. Also I want to protect myself when I am in public places. ...
1
vote
1answer
46 views

Is rootkit detection by comparison of file, process and connection lists a good practice?

I'm currently reading the Blue Team Handbook and one of the recommended methods to detect rootkits is to compare technical data obtained from various sources. As I understood it this is practiced like ...
28
votes
6answers
10k views

Is pinging a website essentially the same as visiting the website through a browser?

I was looking at the domain information of a website (poaulpos.net) on who.is that Chrome connects to whenever I visit a specific an old Tech Times article about Thunderstrike 2, a Mac firmware attack ...
1
vote
3answers
58 views

When is IP blocking OSI level 7 only and what is the purpose of doing so on multiple locations?

Let's say there is an application that has IP whitelisting, all other IP's are denied. This check takes place on three different locations: iptables, .htaccess, PHP script. Now in what OSI layers ...
0
votes
2answers
61 views

Do any open-source firewalls support remote management? [closed]

Remote management is essential if you have to run more than three network devices, and is supported by all commercial firewall products. For example: Palo Alto Networks: In addition to control ...
0
votes
0answers
8 views

FID on iPad app on non company network

I am planning to implement SSO for one of company iPad apps. The app will never be on an App Store but instead loaded with third party authentication. The users on iPad will rarely be on the company ...
0
votes
1answer
18 views

Default GW IP address shared with management interface IP: any securirty implications?

Building out separate VLAN for management interfaces. The proposition is to use Default GW IP address as a management interface for network device. Any security concerns?
1
vote
3answers
81 views

Is SSL Interception possible without disabling Public Key Pinning on the client side?

I'm currently setting up a pfSense firewall in my lab. It supports SSL Inception which works pretty well for most sites. But there are some sites which use HTTP Public Key Pinning to prevent MitM ...
0
votes
1answer
93 views

Why does DNS Spoofing not working on HTTP ,HTTPS Sites? [in my case]

I am trying to perform a DNS spoofing attack, but the confusing thing is that when I'm performing the attack on HTTP sites, nothing happens. But when I perform it on HTTPS sites, when I reach the ...
0
votes
0answers
55 views

How to create reverse shell using teensy as a USB Keyboard?

For pentesting, I found several tutorials and demo codes online. Teensy is a PCB board which can act as Keyboard/Mouse/Joystick. Teensyterpreter I have read tutorials from Teensyterpreter. It is ...
0
votes
1answer
29 views

Question about Standard Access Control List

According to my textbook, it states that a Standard ACL should be placed on the router interface as close to the destination as possible. I am not sure what that means unless each router gets their ...
0
votes
1answer
78 views

Detecting DNS tunneling

I have been trying to detect/establish DNS tunneling. First of all I logged out of my user account of the captive portal. Findings: $ nslookup <somesite> // works fine $ ping <somesite> /...
0
votes
0answers
44 views

How does an attacker compromise a soft switch?

Speaking of soft switches (e.g soft switch in data plane of software defined networking). I've been trying to find a good research paper or article that explains how an attacker can compromise a soft ...
0
votes
0answers
41 views

ipaddress of my VM doesn't look correct [migrated]

I am trying to setup metasploitable in a Virtualbox VM. My impression is, that once Virtualbox is set up to work in host-only adapter mode, the VMs should follow the networking settings defined in the ...
0
votes
1answer
39 views

How do you shun an IP automatically based on the number of current connections?

If I have a single IP that's trying a Denial of Service attack, how can I automatically have it banned/shunned? I go in and manually put it in a group of banned IP addresses, but I'd like for it to ...
-4
votes
1answer
42 views

Public IP from my UVerse router [closed]

Please keep in mind that I don't know much so use small words and talk slowly when helping me out. At work we have our network set up in the following way: Our internet comes from AT&T U-verse ...
3
votes
3answers
93 views

Single web application - security advantages to two server model?

I'm looking to deploy infrastructure for a web application that will live on a LAMP stack. The infrastructure is such that this is the only application that will ever live on this server and it must ...
0
votes
0answers
53 views

ARP spoofing on WLAN: seeing only traffic coming back

I am attempting to capture network traffic of my mobile device connected to switched network via WIFI, utilizing arpspoof. I did all steps tutorials mention. What I see in Wireshark is only a half ...
1
vote
1answer
36 views

What does it mean when airodump-ng shows 0 beacons?

I have one particular AP that shows 0 Beacons in airodump. I can see the beacons in all the other AP without a problem. So is it even possible for AP to not send beacon frames?