Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

0
votes
1answer
35 views

Automating NIKTO scanner

I am working on NIKTO automation. I have a text file contains list of IP addresses along with their ports open. I have already made nikto script. Script functionality - it takes IP addresses and then ...
1
vote
1answer
149 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
4
votes
3answers
5k views

Doesn't an IP conflict occur when ARP spoofing?

I am playing around with Ettercap and ARP spoofing attacks. I have noticed that the computers that are involved in my attack not are displaying any messages telling that an IP conflict has occured. ...
0
votes
1answer
39 views

Unidentified Filemount in Ubuntu

Not sure if this should go under security or Ubuntu but, I believe that my server got hacked somehow. Its being hosted on Digital Ocean and I mainly use it fiddle around with things. Today, I got a ...
0
votes
0answers
67 views

Could other people steal my Internet connection if they had my PPPoE data?

Would it be possible for other people to use my PPPoE data to get Internet access or is it somehow restricted to my house? Then what about my neighbors downstairs, could they do it? And what about ...
0
votes
1answer
189 views

WLCTL protocol detected by sniffer in an Android tablet

I detected that my rooted Android tablet had a slow connection. Trying to find what is taking the bandwith, I installed a firewall (DroidWall) and I blocked all the applications thinking that one of ...
0
votes
0answers
20 views

Monitor amount of data passing through my modem [migrated]

I am considering switching to an ISP plan that has a limit on monthly data usage. Before I do that I wanted to find out exactly how much I'm using. I've been searching for a product that would allow ...
1
vote
3answers
47 views

Does sending image files in http in a secure application pose any risk? [duplicate]

I came across this scenario recently, where a mobile application used for banking is sending HTTP requests for GIF images and HTTPS requests for all other transactions. But the requests to the GIF ...
0
votes
1answer
63 views

TAILS or FREEPTO is better to stay anonymous on the net? [closed]

Which is safest for security and being anonymous in internet? I have heard TAILS is better because it was used by Snowden, but I don't really know FREEPTO.
6
votes
2answers
375 views

How to be safe from wifikill!

I recently found that my friend is using wifikill apk on his rooted android and I would like to get rid of that software as I always get kicked from my wifi. I have to give him the password of my wifi ...
-1
votes
4answers
321 views

How to find out if somebody is spying on my private browsing data in the same WiFi network? [closed]

I live in a hostel and eight people including me, are using the same WiFi network. One of my friends is a "computer wizard". I would like to know if he is secretly checking my browsing history and ...
7
votes
4answers
1k views

Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?

So I just learned about the jasager attack, via the wifi pineapple and it struck me immediately that it wouldn't work at all if network managers (privately) associated MAC addresses with hotspots and ...
1
vote
3answers
525 views

Install my own proxy

My school network has blocked a lot of webpages, including TeamViewer, which I need. The IT department told me to find a proxy, because it was their ISP who had blocked the sites. To connect to the ...
0
votes
2answers
78 views

Can I VPN a phone's connection to my home network, and then apply my home firewall to my phones network connections?

I have a decent firewall/router at home, and I was wondering whether it would be possible to use my home firewall for the connections that my phone makes, even when I'm not at home. It would mean ...
5
votes
3answers
1k views

Is it possible to catch a virus on my LAN without clicking on anything?

My unpatched PC running Windows is connected to a network which contains other "infected" computers, can I get infected by viruses without any interaction on my part?
14
votes
5answers
3k views

Are consumer-grade routers any more or less vulnerable? [closed]

I apologize if this is an obvious question, I'm not very familiar with hardware. I am planning on hosting a few personal websites from my home, but I'm concerned about my security. I'm using a fairly ...
1
vote
3answers
197 views

Can a network admin see my computer's screen if I'm logged into their wifi network?

I had a friend try to convince me today that simply by signing into a wifi network, without any physical access to your computer, the network admin can see your computer's screen. Obviously this is ...
0
votes
0answers
96 views

Should I use a VM firewall or not?

I am managing a couple of VPS-es on an old platform I would like to no longer maintain. We used a widely used commercial VPS control panel to create the VPS-es in question. The customers may ...
1
vote
1answer
142 views

Does VPN remote port forwarding compromise the anonymity of the VPN user?

An anonymous VPN service will typically assign the same public IP address to many VPN users. This procedure ensures that a connection cannot be traced back to the VPN subscriber: behind the veil of ...
3
votes
3answers
2k views

What risks are involved in exposing our home computers over the public internet?

I'm currently running a webserver from home accessible on the public internet via a static IP. What kind of risks are there in doing so? From what I understand, the setup will not allow connections ...
7
votes
2answers
654 views

Does DNSSec have any benefit if used with IPSec-enabled IPv6?

I'm not sure if the RFC's support a IPSec-only implementation of DNS, but if it does, what does that mean for DNSSec? Is DNSSec an IPv4-only technology?
3
votes
1answer
99 views

Any tools like PuTTY for manually stepping through network communications?

Are there any tools that would allow me to "manually" step through the network-stack processes of a device connecting to a network and communicating with other devices? Similar to using PuTTY to ...
3
votes
4answers
2k views

What reputable site should I download Putty from?

I recently did a Bing search for Putty and can only guess at which distribution is "trusted", contains no malware, or sleuthing code. If you needed to download Putty for a high security Windows ...
1
vote
2answers
186 views

VyprVPN (from GlodenFrog.com) weirdly keeps sending unauthorized suspecious data even after uninstall [closed]

Update: Check the VyprVPN's app developer answer below, seems this is okay and an uninstaller is added to new versions to prevent such issues. Original: I was working with VyprVpn a few months ago, ...
1
vote
0answers
52 views

Host-based security architecture for web server network

I am begining with network security and after studying for a while about often used technologies I got to this architecture for my home server (sorry it is not in english). I considered 3 basic ...
1
vote
2answers
85 views

NMap to scan a private subnetwork

I have a test network setup based on virtual machines. My host machine, a web server and the firewall is under the 192.168.0.0/24 network (gateway is 192.168.0.1); a server machine is located behind ...
5
votes
2answers
2k views

Event monitoring for a home network

I'd like to utilise some of the free SIEM type products out there to increase the chances that I will detect attacks and compromises of any of the devices on my home network. Most of my home devices ...
3
votes
2answers
780 views

Is it possible to block url using manageable switch

I want to block some specific Urls and DNS addresses. I am thinking if i buy a manageable switch (More specific would be TLSF1024D) what can i do to block some sites, and specific urls like ...
2
votes
1answer
115 views

Forensics - trace back DNS query origin on host?

So I tried to search the web for answers but didn't find any. Is there any way to trace back which exe file or application caused the computer to make a specific DNS query?
0
votes
1answer
58 views

Can I tell if a python script is secure from transmitting sensitive data by analyzing its imports?

A thought experiment My goal is to know whether, and how, a 3rd party python script that may be entrusted with sensitive information, can be trusted on a fundamental level. Basically this question ...
6
votes
4answers
8k views

Prevent network users from creating an unauthorized outgoing VPN connection to avoid network policies

Is it possible to prevent network users from creating unauthorized outgoing VPN connections to avoid network policies? Edit- What is the best way to detect unauthorized outgoing VPN connections while ...
0
votes
3answers
123 views

Is my LAN infected?

I don't know if this is the right place for this question but here it goes... When I access websites that have Google ads included with a device (pc, tablet, laptop) connected to my LAN, these ads ...
0
votes
1answer
97 views

Analyzing a TLS connection?

Suppose I want a secure TLS communication between me and myschool.edu. Which of the following should I trust to preserve confidentiality, integrity, and authenticity. Here are the options and my ...
18
votes
3answers
1k views

Are open wireless networks unencrypted?

When you connect to an open wireless network (that is, a wireless network without any symmetric password set) is there any sort of secure key exchange going on, or is data sent back and forth ...
2
votes
3answers
168 views

Most secure location of database

Let's say I have a straight forward completely database driven web site application and I store my database on my web server in the DMZ. I won't be broadcasting the IP address of my database because I ...
39
votes
5answers
6k views

Bring your own phone to a (new) job: Consequences?

I am starting a new job, and I have the choice to receive a phone from the company, or bring my own phone. I am considering using my own phone, to avoid having an extra device, but I want to better ...
2
votes
2answers
60 views

Can a website detect which method you are using to connect (LL2P, SSTP and PPTP)

When you connect to a website using a VPN with the same IP however using a different type of connection each time (LL2P, SSTP and PPTP) can the website detect the difference between these connection. ...
2
votes
2answers
6k views

What details does my iPhone reveal about the user (if any) when I connect to a wifi network?

I accidentally used my work's wifi to look at porn using my iPhone. I refreshed a tab I had open from a session when I wasn't at work. Now I'm worried my firm will find out. The network is ...
2
votes
2answers
72 views

What will happen to my Windows PC if I visit a site from a network marked as malicious by google safebrowsing [closed]

Google rated a whole network in china as malicious: http://www.google.com/safebrowsing/diagnostic?site=AS:4134 Quite a few of our customers have their websites hosted in that network (e.g. ...
0
votes
0answers
33 views

How do TSC (TKIP sequence counter) calculate into WPA?

I'm reading about 802.11, from IEEE's pdf (IEE pdf), from page 1191, and in particularly I'm reading about TKIP. And to decrypt and to encrypt used a TSC (TKIP Sequence Counter) as you can see in ...
1
vote
1answer
66 views

How can I get EAPOL packet's number?

I need to work with EAPOL packets, and I have to distinguish between first, second, third and fourth... If I'm using WPA2 I can use the first 2 bytes of Key Information field, and I can use Key MIC, ...
8
votes
2answers
1k views

Spoofed IPv4 and IPv6 addresses over the internet

I have a few questions regarding IPv4 and IPv6 spoofing. Might as well just list them to be concise: What's the usual routing policy for ISPs' routers in regards to spoofed source addresses? i.e. if ...
-1
votes
2answers
1k views

DrayTek Vigor 2920 HTTPS allowed

In my office we have a DrayTek Vigor 2920 router, with CSM setup to only allow certain keywords (keyword objects) to certain IP groups. This all works fine, however we've discovered that all HTTPS ...
3
votes
2answers
145 views

How can you transmit data without revealing your location?

Anyone can pick up wireless transmissions without revealing their location, but transmitting is much harder. What types of wireless communication systems are there that a device can use to transmit ...
0
votes
2answers
155 views

Advice - When just starting your career, what are the best certifications to eyeball? [closed]

Im just starting out in school to study Network and Info Security. I know this is the field I want to invest my time and study into. Well over 200k security jobs went unfulfilled last year. My ...
7
votes
0answers
106 views

WPA2 ephemeral key derivation

I'm trying to learn how ephemeral keys in WPA2 4-way handshake are derived. Starting from 4 EAPOL packets sniffing, I successfully derived PMK and PTK reading ANonce, SNonce, and knowing ASCII-PSK ...
27
votes
4answers
25k views

Should SSL be terminated at a load balancer?

When hosting a cluster of web application servers it’s common to have a reverse proxy (HAProxy, Nginx, F5, etc.) in between the cluster and the public internet to load balance traffic among app ...
0
votes
2answers
92 views

Is there any reason that captive portal server can't block the ICMP echo request/reply packet

We can get connected to those public WiFi hotspot without the account but can access to no website but the login page. As I tested, all those login website would respond to my ping even I was an ...
8
votes
4answers
6k views

How to detect hosts running in virtual machines with nmap?

I have to determine if a given subnet has virtual hosts. Are there any ideas about what switches to use?
3
votes
2answers
1k views

How can I get a fiddler-style trace of an iPhone / Android?

I want to audit the HTTP and HTTPS activity of apps downloaded onto my mobile device. What is the best way to do this? I own the device, can add a root certificate, and can connect the running ...