Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

1
vote
2answers
19 views

When should I drop a packet with ICMP type 3, code 9 or 10, TCP RST, or TCP ACK?

This answer says there are a few ways of dealing with a blocked packet at a firewall: At each of these levels a 1st IP packet (and any other protocol packet as an ESP or AH packet) might receive ...
2
votes
2answers
8k views

Block all internet access from a computer except for allowed applications and domains?

I want to block all internet access from a computer except for allowed applications and domains. E.g. BLOCK ALL Except security.stackexchange.com/... Except skype.exe How can I do this? -It needs to ...
4
votes
1answer
82 views

Is it possible to trace a backend through a reverse proxy?

I'm creating a reference network topology for a WebSocket chat application at work, and I'd like to have something clarified for my own understanding. The current topology involves a reverse proxy ...
1
vote
1answer
66 views

Private VPN server in public cloud

I need to encrypt all my traffic, because I often work in unsecure network environments. My questions is this: if I buy my server from VPS providers (amazon ec2, digitalocean, etc) - how secure ...
20
votes
2answers
2k views

How does this HTML5-based “Mass Router Infection” scheme work?

I read this article stating that purely through a website, "without any user interaction" mass router infection is (/was?) possible. I'm not sure that this problem still exists as it was posted 3 ...
3
votes
1answer
116 views

Is this the end of malware use of DNS?

I read about the release of a free dataset of malware related DNS queries called "Predict". A researcher or network security team can download or query this data set and use it to identify malware ...
-4
votes
0answers
27 views

Wifi penetration testing aireplay-ng does not send packets [on hold]

bt ~ # aireplay-ng -1 0 -a 00:19:7e:4d:79:79 -h 00:11:22:33:44:55 -e 4ae8 rausb018:27:07 Waiting for beacon frame (BSSID: 00:19:7E:4D:79:79) on channel 10 18:27:08 rausb0 is on channel 10, but the AP ...
0
votes
1answer
44 views

Encrypting layers of OSI

I was reading that WPA2-PSK encrypts layer 2 of the OSI network model. What is the danger of having this layer in plaintext (I know it can be decrypted very easily from within the network)? Is there a ...
-3
votes
1answer
27 views

Switching between networks,Sniffer Prevention [on hold]

Any one to explain the process of switch and architecture in prevention against Sniffers.? Switching between networks is i have been reading and others techniques such as Encryption Secure shell ...
1
vote
1answer
389 views

802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)

So I have read that 802.11 standard requires stations and APs to go through the authentication and association before communication can take place. I also know that WPA/WPA2 has its own authentication ...
0
votes
1answer
73 views

Securing a Linux Computer [on hold]

How would one go about securing a Linux computer? Of course there's the obvious steps, like setting restrictive directory access permissions, and I've heard of LSMs like Apparmor and SELinux, as well ...
-3
votes
0answers
79 views

Ph.D in Netwok Security? [on hold]

I'm already Cisco Network Support Engineer and cleared CCNA Exam . I wanna to start my PhD in network security. What kind of programming skills(Java,c++, Erlang) are required to gain before join PhD ...
2
votes
1answer
73 views

Why would a corporation NOT want to allow users on a corporate network to RDP to their specific desktops?

I have a multitude of users that are requesting the ability to RDP from other workstations, on the same network, to their specific desktop computers. I would like to know what the risks of this are ...
0
votes
2answers
135 views

Identifying the correct ssid

Suppose a wifi network is present with a given ssid.Now I create a hotspot with the same ssid as that of the original network.If a user tries to connect to the wifi , which one will he connect to?Also ...
-3
votes
1answer
29 views

A collection of tests and demos for security headers and TLS configurations [closed]

There are (or have been) various websites designed to educate and provide examples on good / bad configurations of security headers and TLS configurations (e.g. https://badssl.com/) I want to build a ...
3
votes
2answers
167 views

Wireless password available in plaintext

Running below command in as admin from Windows : C:\Windows\system32>netsh wlan show profile name=MY_WIRELESS_NAME key=clear Outputs : Security settings Authentication : WPA2-Personal ...
3
votes
1answer
398 views

Zeus botnet source code

I am doing my project on botnets and wanted to understand the source code of the Zeus botnet. Where is the right place to get started with some analysis of zeus botnet source code? I need a good ...
1
vote
2answers
184 views

Can I connect to a network without being detected? [closed]

Some people use software like whoisonmywifi and so on. Is there a way to bypass this software? I think it pings all IP addresses like 192.168.1.0/24 so it will ping all addresses. Can I disable ...
12
votes
4answers
7k views

Looking for botnet IP address feeds to protect against DDoS

I would like to get a live feed of botnet IP addresses delivered from a service and block them under certain conditions. Preferably community based/open source but open to looking at worthy commercial ...
2
votes
1answer
112 views

User Binding Request with credentials in Lync Dump

I've dumped a call between two lync clients and saw that there were some UDP packets that look like this: Server -> Client 1132 14.495362000 <serverip> <clientip> STUN 146 ...
3
votes
1answer
40 views

Event codes for Unix [closed]

I have to write alerts in SIEM Tool. Do we have any events code for Unix as we have in Windows. If yes, where can I find that? If not, on what basis can we write alerts for unix flavours or ...
2
votes
0answers
149k views

Hack into a computer through MAC and IP address [closed]

Is my computer vulnerable to someone who knows my modem's MAC address and my public IP address? What kind of vulnerabilities would this imply? Could they actually get access to my computer just with ...
0
votes
0answers
51 views

How to monitor websites being visited on network? [duplicate]

I want to monitor the websites that are being visited on my wifi network by the different IPs connected to the network. Is there a way to do this, other than Wireshark?
0
votes
5answers
78 views

Monitor websites being visited on network

I need to monitor the websites being visited on my wifi network by the different IPs connected to the network. What is the best way to do this? I spent some time with Wireshark but I feel it is a bit ...
1
vote
1answer
36 views

Link(s) between subnet mask, IP address and subnet ID [closed]

I am studying CompTIA Security+ material and am struggling to understand the link(s) between a subnet mask, an IPv4 address and a subnet ID. The question that I'm working on is as follows: Your ...
0
votes
1answer
43 views

What kinds of attacks can VLAN's mitigate? [closed]

Assuming these very basic kinds of attacks: Header based Protocol based Authentication based Traffic based What would using a VLAN mitigate? Several people seem to be overthinking the question. ...
3
votes
1answer
146 views

How to sniff [possibly encrypted] TDS protocol data from the host the client application is installed on?

Let's say, there is an .NET application on a windows 7 host where I have administrator's access rights. The application works with remote MS-SQL server which I don't control, it also seems that the ...
0
votes
0answers
25 views

SDN Security - why not attack the controller itself?

I have been looking into SDN (Software Defined Networking) and one advantage of using this is to be able to redirect traffic to stop DDoS attacks. The traffic is ultimately thrown away. My question ...
-2
votes
0answers
32 views

Are there any notary-like services for standard HTTP content? [duplicate]

One of the things I've consistently noticed is that a lot of open source projects and companies publish the public keys they use to sign packages on HTTP sites, with no HTTPS equivalent. I've come to ...
2
votes
2answers
71 views

Are documented networks easier to attack? Are undocumented networks easier to protect?

I am learning about network documentation for the first time and have come across the following statement: Undocumented networks might not be protected and can be used to support insider attacks. ...
2
votes
0answers
60 views

Ways to prevent traffic injection by ISP [closed]

I live in a big brother country (Egypt, but valid to many other countries), which apparently bought Hacking team and fin fisher software since couple of years. After reading about the very-easy ways ...
2
votes
3answers
98 views

How to protect against rogue Base Stations? [closed]

I just read the answer to the question here and it sounds surprisingly simple for calls/SMS (and data?) to be intercepted by a fake base station. From what I understand, if you were to walk past ...
4
votes
2answers
147 views

How do RATs access computers through routers?

I've started trying to increase my networking security at my house. One thing that worries me (because other people in the house are always downloading viruses that come along with "free" games) are ...
4
votes
6answers
12k views

monitoring outgoing network traffic [closed]

The graphs for one server that I am using are showing consistent 7.5 kb/s outgoing network traffic that started a few days ago. How can I monitor/log/capture/analize this traffic to see what is it, ...
5
votes
1answer
130 views

Ideas on how I can fragment captured network traffic?

I am trying to create a lab environment where I can analyze common IDS solutions (starting with Snort specifically) and their ability to reassemble fragmented IP trains. I have a collection of ...
0
votes
3answers
949 views

What is same site scripting and what are some exploit scenarios?

I know it is an issue with how DNS is configured , but is it really dangerous if the attacker couldn't access your network?
4
votes
1answer
205 views

Is it possible to sniff traffic of a remote network? (With admin access to router)

Me and a friend of mine are simulating a widespread scenario where router configurations are untouched (default passwords) and are visible from the internet. Him, acting as the victim, will constantly ...
2
votes
1answer
56 views

How can I detect subnets? [closed]

Given a WAN, which is connected to the internet via a single exit point. Inside this WAN, I don't want to have any subnet structures. Every user gets his own access point, which he can expand via ...
0
votes
2answers
124 views

Is it safe to put my own router in my neighbour's DMZ?

I use my next door WiFi for a small charge as I am unable to install my own broadband connection. I have a 300Mbps WISP router connected with a fixed IP to my next doors router (192.168.0.2). My ...
21
votes
8answers
5k views

Is there a way to make a WEP-secured AP uncrackable?

For some days, I was feeling that my Internet bill was booming. Then, I recently found out that a boy near my house was accessing my router to use the Internet. Then, I read some articles how to crack ...
1
vote
1answer
98 views

running botnet for analysis

I a very curious to understand botnets practically. I want to run a p2p botnet (storm or waledac) for analysis and learning. I have mainly two issues: Where can i get access to binaries of either ...
0
votes
3answers
70 views

Is it possible to get Network Domain from Client with PHP or Apache? [closed]

I'm working on a solution to identify client Network Domain or Workgroup in a private network. Based on it, I must change some access permissions. I can't do that through IP address because it isn't ...
1
vote
1answer
105 views

Segregating a Printer in my Enterprise Network

I have a EAP-TLS network at home which I've managed for some time now. I just got a new Brother HL-5470 printer so I can finally print things at home, which is really nice. The only problem is that ...
1
vote
1answer
66 views

Automating NIKTO scanner

I am working on NIKTO automation. I have a text file contains list of IP addresses along with their ports open. I have already made nikto script. Script functionality - it takes IP addresses and then ...
4
votes
3answers
162 views

Is there a way to block your ISP from controlling the password of your main router?

I got internet installed at my home earlier today by Bright House Networks. When I asked the installation technician about changing the router administration password, he said that he can change it ...
3
votes
2answers
109 views

Share network with neighbor

My neighbor asked me if I wanted to share his network with me. Internet access is a little more expensive here than I am used to in my country. Before saying yes I wanted to know if I had risks in ...
1
vote
0answers
60 views

Web/search engine spider on local network?

I was setting up a test webserver on my local network earlier, and whilst sorting out the firewall I noticed the following in the log (/var/log/ufw.log - I'm using UFW on Ubuntu 14.04): Jul 9 ...
1
vote
1answer
155 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
1
vote
0answers
51 views

Adding a binary to the firmware of a routing device [closed]

I've been playing around with a router d-link dwr-921 and found some vulnerabilities in the web interface. I still haven't managed to get shell access and now I'm thinking about modifying the firmware ...
2
votes
1answer
5k views

In Metasploit, how to use a custom exe as payload?

Question was once on a mailing list but wasn't answered. I want to use a custom exe as a payload in metasploit. For example when I use exploit/multi/browser/java_atomicreferencearray and want to ...