Tagged Questions

Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

3
votes
2answers
90 views

How much of a risk to students is an open WiFi network on campus?

I've been battling bureaucracy at my community college for months on this issue; a few months ago, they changed security on the SSID for students; It used to use EAP, allowing students to enter their ...
8
votes
3answers
2k views

Is it possible that authorities can't block a certain website

I was watching a very recent TV show, the FBI agent told the police that there is no way for anybody to block a live stream of a pedophile torturing a kid nor to trace it. Even when it's being ...
0
votes
1answer
46 views

iptables intercept received packet with proxy and then forward to destination

Lets say I receive internet through my eth1 port and share it via hotspot to other devices (wlan0 port) [internet]----(eth1)[my computer](wlan0 hotspot) | ...
-1
votes
0answers
30 views

Host based. Encrption [closed]

As encryption conceals the contents of network messages, the ability of intrusion detection systems to read these packets decreases. Some have speculated that all intrusion detection will become ...
-4
votes
0answers
31 views

Getting ddosed with the new macbook software upgrade [closed]

I just installed the new Apple OS X Yosemite software and it's been [sub-par]. It kept freezing, and on top of that I just got ddosed by a [censored] via skype and I had no idea what to do. So, smart ...
5
votes
3answers
784 views

What are the risks of making ether-wake available to all users?

The Linux ether-wake utility, which creates a magic packet to wake on lan another machine, requires root access: $ether-wake 12:34:56:78:9A:BC ether-wake: This program must be run as root. To give ...
0
votes
2answers
125 views

How to be sure that downloaded file is correct? [duplicate]

Last week I read a lot about security. I have a basic understanding how public keys or private keys works. But I still have a lot of questions I can't find an answer. Right now I'm interested in ...
0
votes
0answers
47 views

Spoof DNS in a Rogue AP [migrated]

I am using 2 interfaces on my computer, eth0 grants access to the outside world and wlan0 is where the Access Point is set up. My configuration is based on 2 networks 192.168.1.0 on eth0 and 10.0.0.0 ...
1
vote
2answers
59 views

How Secure are Virtual Networks [duplicate]

When using a Virtual Network, is it possible to infect the underlying Network infrastructure with malware from the Virtual Network. How safe is the use of Virtual Networks?
1
vote
0answers
85 views

What is my router listening for on ports 5555 and 3333? [closed]

I recently discovered nmap and pointed it at my router out of curiosity. It found that ports 3333 and 5555 are open but doesn't recognise either service. I investigated and found: I can successfully ...
1
vote
3answers
56 views

What security implications are there when sending video feed over unknown applications, and how can we protect ourselves?

This might sound broad -- but it has to be considering the details are truly unknown. Context: Our university (and many more) have begun rolling out mandatory webcam recording for certain portions of ...
2
votes
1answer
57 views

Local AP - Outside Router MitM Attack?

Let's say that we have our computer inside the local network. Our local network is connected to the Internet by AP+Router that connects to the router in other network which is connected to the ISP. ...
-3
votes
0answers
10 views

I want to implement EAP TLS based authentication in my Java project how can I implement ? is there any API available in Java for using that protocol? [migrated]

I want to implement EAP TLS based authentication in my Java project how can I implement ? is there any API available in Java for using that protocol ?It will be great help for any reference .
1
vote
0answers
27 views

How to sniff [possibly encrypted] TDS protocol data from the host the client application is installed on?

Let's say, there is an .NET application on a windows 7 host where I have administrator's access rights. The application works with remote MS-SQL server which I don't control, it also seems that the ...
1
vote
1answer
87 views

Sticky keys on RDP

A recent report on page 18 states that: [black hats] have even leveraged [systems administration tools] as a means of maintaining additional persistence via setting “sticky keys” for RDP sessions. ...
0
votes
3answers
93 views

What is same site scripting and what are some exploit scenarios?

I know it is an issue with how DNS is configured , but is it really dangerous if the attacker couldn't access your network?
1
vote
1answer
137 views

Browser gives access to root directory through “/” [closed]

If I put a '/' on my browser I have full access of my root directory. I have tried the same thing on another computer and it didn't work. So, I'm trying not to be paranoid but this is too strange. I ...
10
votes
1answer
941 views

Is it even possible to hack a television channel?

In spite of all the hacking news in the recent few years I never heard of someone who managed to hack a TV channel. What makes them so secure?
1
vote
2answers
44 views

Shared Database and PCI Compliance

Say we have a cloud based web application which is SaaS. This application is to be made PCI compliant as a service provider, as client card data passes through the application. This application uses a ...
0
votes
4answers
66 views

Does access to a BISmark router mean access my network?

Project BISmark aims to measure broadband service by recording and reporting on service using OpenWRT-based router firmware (software licensing unclear, no LICENSE or COPYING files in the repos) with ...
0
votes
4answers
243 views

Anonymity through Tor over VPN [closed]

I want to do some research on network anonymity. Assume that I am careful enough not to disclose any personal information while connected to an anonymous network. If I run a system that uses TOR ...
3
votes
1answer
97 views

If I connect to VPN through proxy, who can see what?

I try to understand what happens when I use an HTTP(S) proxy in my OpenVPN client configuration. What's the advantage of an HTTPS proxy over plain HTTP? In any case the encryption takes place on the ...
1
vote
1answer
62 views

Communication between two open endpoints, is this secure enough?

I'm building a (very simple) tool to communicate between two servers. I started by asking if there was a better alternative than making a home made scripts and we came to the conclusion that for ...
1
vote
2answers
78 views

Facebook security

I check my security settings (from my Facebook acc.) from time to time, and sometimes I see there are IP addresses which logged into my account but don't belong to me. When I look in the web who is ...
-1
votes
2answers
120 views

Is it dangerous to use hamachi

In the Minecraft community people are firing up hamachi with Minecraft servers, but over all is a public hamachi dangerous for the host and all the users using it?
0
votes
2answers
149 views

Fake phone call

I have a problem, getting call from known numbers and when he lifts it, no one is speaking from other side! Well, the awkward part is, the call is from known numbers only, but if I ask the person ...
1
vote
2answers
105 views

Nmap scan list of domains and provide boolean if up/down

I have a newline separated list of domains that I would like to perform an arbitrary nmap scan on (e.g. aggressive, syn) and I would like to output a boolean that indicates whether or not any ports ...
0
votes
0answers
11 views

logging of data traffic to follow cyber law [migrated]

I have connected my ubuntu 14.04 computer to a "mirrored" port on my firewall, so that I can see all traffic on the network. I use this today to see who uses our bandwidth with NTOPNG. but since I ...
-1
votes
0answers
86 views

Can I used the command line to disable settings in Yosemite that have made my Mac visible? [migrated]

Recent changes to my machine as the result of an upgrade to Yosemite (OS X 10.10) have made my machine visible on Bluetooth and Bonjour, where it was not visible before. Is there a command line way ...
0
votes
2answers
102 views

Advice - When just starting your career, what are the best certifications to eyeball? [closed]

Im just starting out in school to study Network and Info Security. I know this is the field I want to invest my time and study into. Well over 200k security jobs went unfulfilled last year. My ...
0
votes
1answer
158 views

My computer hacked? tcpdump show a connection to an ALLOCATED UNSPECIFIED ip address

13:06:05.345111 IP 192.168.1.101.36218 > 157.55.130.174.40033: Flags [.], ack 162, win 237, options [nop,nop,TS val 688796 ecr 596714815], length 0 This IP address is Allocated Unspecified on ...
3
votes
0answers
81 views

Is it possible to retrieve SSH v2 credentials in a username/password authentication scheme?

I'm currently analysing a compromised network(root access has been gained to a workstation and logs show that it has been used for port scanning and service brute forcing attacks on the remaining ...
0
votes
1answer
44 views

How to test for zone transfer? [duplicate]

I heard that it is possible to test for zone transfer attacks on a web application using host and dig commands in Linux. How it is done?
-1
votes
1answer
75 views

Shellshock vulnerability for pc inside LAN

A common pc running bash inside a home LAN network (with a router/gateway providing internet access to the LAN) does not have any contact with the external internet, except browser navigation and the ...
2
votes
3answers
231 views

Understanding the security of my home network

With so many devices that have internet connectivity, I really want to put something in place that can alert me if any application or device is communicating insecurely. How would I use something like ...
-1
votes
1answer
44 views

How strong exactly is a 3gbps booter?

I heard some people talking about how they had a 3 gigabyte per second drddosser. That sounds all fine and dandy, but what can that actually do? Could it take down a website? To what extent?
2
votes
1answer
102 views

How secure is WiFi roaming if clients connect automatically to access points with the same SSID and security?

After reading a bit about WiFi roaming where multiple access points are set up with the same SSID and WPA/WPA2 shared key, I'm wondering how secure the concept of WiFi roaming is. If clients connect ...
1
vote
1answer
78 views

How can we represent SSL and Firewall in OSI Model? [closed]

I want to draw an architecture diagram for a general ERP application. In that I have come across a confusing point: where should I place the SSL and Firewall? I tried to figure out exactly where ...
1
vote
0answers
56 views

How to retrieve type of device starting from its public ip

Given a public ip, is there a way to retrieve what's lying behind? I mean if I use nmap -PO 159.149.xx.xxx I am able to know if the device is alive (responding to ping) and which ports are open. But ...
2
votes
2answers
137 views

Computer's IP address used by another in closed network?

I got an alert in the newest OSX (newest Macbook Air) and in Eduroam network that my IP address is used by another machine. This is my first time in life. I think I may have been attacked because I ...
1
vote
1answer
51 views

How can I implement a whitelist based on packet content?

At the moment I am looking for some way on Linux to have packet filter whitelisting done but based on fine-grained parameters such as packet content rather than more general parameters such as ...
0
votes
0answers
27 views

Using Team Foundation Server for Classified Projects

I work in a secure area on programs in which large portions of the code are federal government classified secret. We use Visual Studio so I would like to be able to use TFS for versioning control ...
0
votes
0answers
49 views

Tunneling Remote Desktop from DMZ Windows server to my Listening Linux Server. How to?

I have a situation in a penetration test where I got a meterpreter on an internal (DMZ) Windows box, and I want to connect via RDP to it, however the RDP port is blocked externally. The box I hacked ...
32
votes
4answers
5k views

Why does malware periodically check google.com

I'm looking at some malware PCAPs, e.g. http://malware-traffic-analysis.net/2014/05/27/index.html . One of the things I've been seeing frequently is requests to alexa top million sites (e.g. yandex, ...
4
votes
4answers
617 views

Server situated on two physical networks - Bad idea or not

The run down: Windows Server A (from here on referred to as 'the server') exists on the corporate network (ref as Corporate). A separate physical network exists for the Telecommunications Department ...
-4
votes
1answer
48 views

What are lawful network interception tools? [closed]

I am looking for network interception tools, which involves sniffing external networks... this is regards to a forensic project.. Any help would be appreciated!
1
vote
1answer
97 views

Worst-case scenario OPEN URL REDIRECTION and why google not covering it in bug bounty

OPEN URL REDIRECTION as per in my opinion can be proved very dangerous by crafting attacks such as phishing. But it seems like google thinks it as a very low level bug and does not provide any ...
2
votes
0answers
35 views

Removing malware which is creating temp file and modifying network traffic [duplicate]

I am on OSX 10.9.2, please note I have included several URLs in my post, this is not spam this is due to the nature of the malware. I have just discovered I have malware on my computer after noticing ...
2
votes
1answer
53 views

Should reverse connections be used to bypass NATs?

I'm planning on doing a demonstration on how remote administrative tools work for my schools computer security club. I plan on writing a RAT in C++ and demonstrating/explaining how it works. I ran ...
3
votes
1answer
227 views

Closely spaced failed logins in auth.log

I have a raspberry-pi (running GNU/Linux) and I recently allowed my router to forward port 22 (ssh) to the raspberry-pi so that I could log in while away from home. I then noticed a bunch of ...