Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

0
votes
1answer
23 views

open network access, common problems?

what are some common problems for companys who offer "guests" - people that word for a different company at the first companys building - internet access? my guess would be easy to sue downloads like ...
-1
votes
3answers
95 views

Jump Servers for security

In my network, I have the clients directly connected to the server; but in the new PCI policies, they required to use jump servers. What is the advantage of using jump servers for security reasons? ...
0
votes
3answers
1k views

Encryption of PCI data, and PCI-DSS scoping

I read another question which made me think... If you encrypt PCI data (credit card numbers, etc.) using PGP or AES and send it through a firewall, is that firewall in scope? Alternatively, what ...
12
votes
4answers
14k views

How can I keep a roommate from seeing my web activity?

I have a roommate who is a network security engineer and I think he hacked our home network and now knows what sites I am visiting and what I am doing online. Although he is not stealing anything I ...
-6
votes
0answers
51 views

How can I hide my activity from our network or IT admins at university or especially work? [on hold]

I both work and study. I recently found out that I am being monitored. I have the fear that the administrators can easily read my emails and have access to my passwords. For work sometimes I have to ...
-1
votes
0answers
36 views

Could you reccomend me a book about Metasploit Framework? [on hold]

I am doing some pen testing and recently encountred Metasploit Framework. I would like to try it or better learn to use it, but wasnt able to find any good book. I found few but they were like 10 ...
4
votes
1answer
1k views

Snort even though working properly does not report majority of rules

I have installed Snort 2.9.7.0 and it does not detect majority of attacks, such as nmap port scans, downloading exe files, opening documents containing keyword "root". I use Snort together with ...
0
votes
2answers
78 views

Hiding my activity from mobile service provider [duplicate]

Ok there is mobile service provider which also happens to be providing mobile internet. Now, I am interested to hide my activity from that provider. e.g. it can't see my browsing habbit. Basically ...
1
vote
1answer
31 views

wpa_passphrase command encrpyting psk

Does the wpa_passphrase command turn an ASCII string into hexadecimal and what is the benefit of doing so? Is the psk sent in the header of packets? Can it be easy to sniff if it's in a string format? ...
1
vote
1answer
61 views

How safe is to leave a open port on router without anything listening to it?

I'm using plex remote, and I have a double-NAT on my local network, so I need to open ports on the two routers. As far I know, I have made secure connections to be required. And I don't plan to ...
6
votes
3answers
4k views

How to detect a virus in a network card?

How can I know that a network card in a server was infected by a virus or not? Are there any methods to check it?
10
votes
6answers
17k views

How to detect eavesdropping by your ISP

I've noticed some funny behavior lately with my home Internet connection such as connections dropping frequently, rate limiting occuring, and packet loss. I know how to get around this online, use a ...
0
votes
1answer
41 views

understanding where tor interferes (screenshot)

with just goal to better understand where tor interferes and where it hides my browsing from ISP, please look at this picture which just explains how to computers communicate. You can check on step ...
1
vote
1answer
84 views

How to capture all traffic from a new device?

I have a new IoT type of device that requires a wifi connection to work. I have no use for the device but I'd like to poke around it and learn more about it. How should I go about intercepting every ...
0
votes
3answers
104 views

How a professional hacker would penetrate a computer in a network?

Which kinds of vulnerabilities or security holes a hacker would use to penetrate and take over a computer in a network, like a normal PC in a default network (Wireless-LAN). I often hear that the ...
0
votes
1answer
41 views

How to sniff 802.11 packets without going into monitor mode?

Is it possible to sniff or capture 802.11 packets which sends my computer to the router (AP). I know that I can't sniff packets which have a other destination MAC address without going into monitor ...
0
votes
0answers
25 views

rdp connection with netcat pivoting

I want to connection from local computer to another local computer. I have 3 machine. for example A: 192.168.1.50 -> in local windows machine B: 50.3.52.110 -> linux server C: 192.168.5.25 -&...
0
votes
3answers
418 views

What service could penetrate my Firewall via UDP on Port 17275?

Has anyone monitored various requests from all over the world on Port 17275 via UDP? My firewall logs show huge amounts of such requests from lots of different IP Adresses. I can't find any ...
-3
votes
0answers
40 views

How can one track the origin of an image shared in Whatsapp? [on hold]

How can one track the origin of an image shared in Whatsapp?
1
vote
2answers
69 views

What phases does a network penetration test consist of?

What are common phases of a network infrastructure penetration test? Staring with discovering IP's and ports? A simple vulnerability assessment, checking version information of banners from different ...
1
vote
4answers
13k views

Is there any solution for block the HTTPS traffic using URL filtering?

The URL filtering can block the HTTP traffic but not the HTTPS traffic in Internet Explorer. For example, the website http://www.facebook.com is blocked by the URL filtering while the https://www....
2
votes
3answers
3k views

What is same site scripting and what are some exploit scenarios?

I know it is an issue with how DNS is configured , but is it really dangerous if the attacker couldn't access your network?
5
votes
2answers
408 views

Is it possible to identify the source of message in whatsapp?

Is it possible to identify the real source of message in whatsapp? Scenario : Texting whatsapp message to a group,one of the group member forwards it to another and it goes on atlast one day it ...
4
votes
3answers
234 views

Can CloudFlare be DDoS-ed and issn't the actual DDoS mitigation limit, financial resources?

CloudFlare (known for fighting DDoS-attacks) is explaining quite a lot about DDoS on their website cloudflare.com/ddos. In an article named The DDoS That Almost Broke the Internet they write about a ...
0
votes
0answers
25 views

Authentication in WPA from a user's perspective

I have read several articles that discuss the differences between WEP and WPA but I haven't seen an answer to my question, which is : How is the authentication used in WPA different from that used ...
3
votes
4answers
30k views

How to know what others browse through the network?

My friend connected to WIFI and after 5 minutes he told me which sites I had actually been browsing, and who I chat with. My question is: how do I defend myself against this, and also how did he do ...
3
votes
0answers
39 views

Is filtering flash based on the mimetype enough to keep it out?

As flash is a real security mess I started blacklisting flash at our proxy by blocking any content with the mime type application/x-shockwave-flash which works pretty well as far as I can tell. The ...
3
votes
2answers
71 views

As an end user on a network, how can I avoid being MITM'd by an SSID-spoofing device?

I've been looking at SSID spoofing devices lately, including the Wi-Fi Pineapple and similar hardware. While these types of devices seem very useful to someone who's up to no good or working as a ...
0
votes
0answers
44 views

Is it possible to figure out a password to a router using an Android phone? [closed]

I have heard that there is programs which cracks the password on wifi for you. Would it be possible to do this using a smartphone?I am not asking for a recommendation for an app, just asking if it ...
0
votes
3answers
93 views

Understanding a DMZ with multiple servers

I get the general principle of a DMZ i.e. place public facing servers in the DMZ to isolate and protect the corporate LAN. I have a web application which is to be public facing, this web app needs to ...
0
votes
2answers
88 views

What is the likelihood of a NAS getting hacked? [closed]

I'm looking at NAS (network attached storage) to use as one of several backup storage devices to store my data, since I cannot find a DAS (direct attached storage) with RAID functionality (all of the ...
0
votes
2answers
166 views

Is it possible to bypass sniffing when using port mirroring?

INTERNET <-A-> ROUTER <-B-> PC Let's theoretically think we mirror the port on a ROUTER to a file. So the full network traffic on it. Question: is it possible to still have ...
-6
votes
0answers
78 views

How can I identify a person accessing my computer? [closed]

Activity on my computer last night when I was not home: Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: 7/16/2016 11:27:59 PM Event ID: 4672 Task ...
2
votes
2answers
49 views

Relaxed access to tcpdump

I'm looking to do some packet sniffing on a computer that I do not have privileged access on. I am considering asking the admins to allow users in a specific group access to tcpdump. Specifically, I ...
4
votes
4answers
69k views

IP address of an iPhone

Recently I logged on to my bank account via the Chase app on my iPhone. I received a message that another device was currently logged on to my account and "would I like to end the session"? Of course, ...
17
votes
4answers
20k views

With IPv6 do we need to use NAT any more?

I'm wondering how to use NAT with IPv6. Seems that you don't even need it any more. So what exactly is the concept behind firewall configurations in IPv6 environments?
28
votes
6answers
10k views

Is pinging a website essentially the same as visiting the website through a browser?

I was looking at the domain information of a website (poaulpos.net) on who.is that Chrome connects to whenever I visit a specific an old Tech Times article about Thunderstrike 2, a Mac firmware attack ...
71
votes
3answers
80k views

Is it a bad idea for a firewall to block ICMP?

This question was inspired by this answer which states in part: The generic firewall manifest file finishes off by dropping everything I didn't otherwise allow (besides ICMP. Don't turn off ICMP). ...
-1
votes
1answer
59 views

Using old router as wi-fi extender/extra security on shared network?

I just moved into a building with three apartments, all of which split an internet subscription. There is only one router, however, in one of the other apartments. For security/privacy purposes, I'd ...
4
votes
2answers
111 views

Set up a system to sandbox/capture outbound traffic from Windows PC?

Does anyone know of a program/system that is purpose built to allow you to sandbox/contain an outbound connection from a Windows PC? The aim being that you can analyse the data being sent via the ...
1
vote
1answer
51 views

Shared folders in Windows to/from unsecured PC on the same network

I have a Windows 10 desktop computer which is my main device. It's password-protected and I'm not concerned about it being physically accessed by bad actors. I have a Windows 7 laptop with a fresh OS ...
4
votes
0answers
51 views

Identify malicous hosts in our network by sending valid domain credentials

We are currently whitelisting the hosts owned by our company on our Cisco switches to prevent private hosts in our network. This works pretty well but someone can still spoof the MAC address of his ...
3
votes
3answers
108 views

VPN server in a router [closed]

I am new to using and configuring VPNs. I was thinking of setting up my router as an OpenVPN server, but as I understand that is to connect form the outside to my network. However, I want a connection ...
4
votes
1answer
262 views

Can the windows Remote Procedure Call subsystem be modified from the default without causing Windows 8/8.1/10 to break?

This is a question that personally as a security professional has bugged me for a long time. So, a default Windows installation, from XP up to 10, typically has a few services listening on the quad-...
24
votes
2answers
5k views

How can my IP camera be hacked behind a NAT?

I keep reading about hackers accessing laptop and home security camera systems. Most home users are using SOHO routers meaning they are on a private IP range behind a NAT. I realize NATs aren't ...
0
votes
1answer
78 views

What path (programming language, courses) should I take inorder to become a network/ security developer. (Not network configuration)? [closed]

I would want to work in network and network security field as a developer(programmer),developing network products(not network/network product configuration) ultimately to get into network security ...
34
votes
3answers
5k views

Do simple Linux servers really need a non-root user for security reasons?

Playing devil's advocate, Let's assume I purchase a Linux server from a hosting provider. I am given a password for the root user and am told I may login using SSH. The only purpose this server has ...
1
vote
1answer
557 views

Can you sniff broadband connections? And how you secure that?

I know that you can sniff data which is transferred over wifi. Can you do that with broadband (wired)? And how can you secure the network, so nobody could sniff data both over wifi, and broadband?
0
votes
2answers
62 views

See the traffic from my own Android phone

My employer (a Dutch university) gave me an Android phone. I am not allowed to root it. Still I want to know what traffic goes through it. Also I want to protect myself when I am in public places. ...
0
votes
2answers
102 views

How can I capture another IP's HTTP traffic with Wireshark network analyzer?

How can I capture another IP's HTTP(S) requests in a local network with Wireshark network analyzer? Is it possible?