Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

1
vote
0answers
22 views

Migration from TDM to All IP: any security issues?

My phone operator is slowly abandoning TDM (Time Division Multiplexing) to replace it with IP connections. What are the security risked related to this change? will all the phone line be like in a big ...
1
vote
1answer
51 views

Strange 'agetty' process running on my VPS.

Recently, I had to reinstall one of my VPS servers (again), due to malware. I took what I considered to be pretty good security precautions. I also locked the root account and am using sudo as well. ...
1
vote
2answers
88 views

Is creating a network bridge in order to connect a virtual machine to the internet insecure?

I have created a virtual machine using Hyper-V running OpenSUSE 13.2. In order to get an Internet connection on the virtual OS I created an external virtual switch. Windows 8.1 then automatically ...
1
vote
2answers
74 views

Is it Safe to Send an Invalid Password Back to the Client?

It is common for websites to remember the username input value after an invalid login attempt but not the password input value. Take SE for instance. When I attempt to login with an invalid password: ...
1
vote
1answer
76 views

What this type of attack called? (gaining peripheral information)

When the intruder looks at the transmitted data and finds information about the sender and the receiver of the data or other peripheral information that won't help him hack the system but know more ...
3
votes
1answer
401 views

Zeus botnet source code

I am doing my project on botnets and wanted to understand the source code of the Zeus botnet. Where is the right place to get started with some analysis of zeus botnet source code? I need a good ...
3
votes
2answers
143 views

What is “Gateway Host Probe”?

I wanted to perform Stress Testing on my router using Metasploit to perform a TCP syn Denial Of Service attack. I have used the following commands: use auxiliary/dos/tcp/synflood set rhost ...
0
votes
0answers
45 views

Alternative to ECC for mobile security

I asked a question a couple of months back, which led me to ECC. The following question is in continuation: Current Setup: I've two devices A and B which need to interact with each other securely ...
0
votes
1answer
60 views

Snort - Rule: Alert all php requests

I am trying to understand writing rules for snort. Further goal is detection of sql injections like here. I've read the documentation of snort rules and created this rule: alert tcp any any -> ...
9
votes
9answers
507 views

Which factors should you take into account when deciding whether users should be informed of a penetration test?

Say you are conducting a penetration test of an internal network. The internal network comprises of workstations, servers and company and contractor laptops. In an ideal world, the penetration test ...
0
votes
2answers
125 views

Is it safe to put my own router in my neighbour's DMZ?

I use my next door WiFi for a small charge as I am unable to install my own broadband connection. I have a 300Mbps WISP router connected with a fixed IP to my next doors router (192.168.0.2). My ...
2
votes
0answers
35 views

please give me an specific example about “a lattice model of secure information flow”?

Currently I read the paper "A lattice model of secure information flow", but I think this paper is so abstract. Could you please give me an specific example and describe what the secure information ...
0
votes
2answers
45 views

Sniffing TLS / SSL through HSTS?

Imagine the following: Client C wants to communicate with server S. The evil attacker A is the Man-In-The-Middle. C sends a request to S, A intercepts it. A creates a self-signed certificate with ...
-4
votes
1answer
77 views

Does Server Mistrust improve security? [closed]

By server mistrust, I mean the fully implemented lack of customer plaintext on a vendor's system, and lack of vendor access to customer plaintext. Specific case in question: Password and SSH key ...
1
vote
1answer
66 views

Automating NIKTO scanner

I am working on NIKTO automation. I have a text file contains list of IP addresses along with their ports open. I have already made nikto script. Script functionality - it takes IP addresses and then ...
2
votes
3answers
137 views

Where is the most secure location to host an admin panel?

I have an admin panel on my site, that enables me to control the content on my website. In order for the admin panel to achieve this, I must have a connection to the site's database. I have two ...
1
vote
1answer
209 views

How to simulate network attacks and use wireshark to detect them?

I am working on a project which involves me to simulate a network attack and to use wireshark to detect the attack. DOS/MIM etc. I have found the following links that provided help but there are still ...
1
vote
1answer
50 views

Unidentified Filemount in Ubuntu

Not sure if this should go under security or Ubuntu but, I believe that my server got hacked somehow. Its being hosted on Digital Ocean and I mainly use it fiddle around with things. Today, I got a ...
1
vote
2answers
150 views

Hashcat does 1-7 numeric characters on brute force attack when specifying 8

I have Hashcat 0.49 on Kali Linux 1.1.0a and I have a .hccap file. It's a WPA2 Network in the file so I chose a mask of 8 numeric characters (?d?d?d?d?d?d?d?d) and instead of starting at 8 numeric ...
0
votes
0answers
72 views

Could other people steal my Internet connection if they had my PPPoE data?

Would it be possible for other people to use my PPPoE data to get Internet access or is it somehow restricted to my house? Then what about my neighbors downstairs, could they do it? And what about ...
1
vote
3answers
52 views

Does sending image files in http in a secure application pose any risk? [duplicate]

I came across this scenario recently, where a mobile application used for banking is sending HTTP requests for GIF images and HTTPS requests for all other transactions. But the requests to the GIF ...
0
votes
1answer
98 views

TAILS or FREEPTO is better to stay anonymous on the net? [closed]

Which is safest for security and being anonymous in internet? I have heard TAILS is better because it was used by Snowden, but I don't really know FREEPTO.
0
votes
2answers
103 views

Can I VPN a phone's connection to my home network, and then apply my home firewall to my phones network connections?

I have a decent firewall/router at home, and I was wondering whether it would be possible to use my home firewall for the connections that my phone makes, even when I'm not at home. It would mean ...
1
vote
3answers
271 views

Can a network admin see my computer's screen if I'm logged into their wifi network?

I had a friend try to convince me today that simply by signing into a wifi network, without any physical access to your computer, the network admin can see your computer's screen. Obviously this is ...
14
votes
5answers
3k views

Are consumer-grade routers any more or less vulnerable? [closed]

I apologize if this is an obvious question, I'm not very familiar with hardware. I am planning on hosting a few personal websites from my home, but I'm concerned about my security. I'm using a fairly ...
6
votes
2answers
560 views

How to be safe from wifikill!

I recently found that my friend is using wifikill apk on his rooted android and I would like to get rid of that software as I always get kicked from my wifi. I have to give him the password of my wifi ...
0
votes
2answers
135 views

Identifying the correct ssid

Suppose a wifi network is present with a given ssid.Now I create a hotspot with the same ssid as that of the original network.If a user tries to connect to the wifi , which one will he connect to?Also ...
3
votes
1answer
107 views

Any tools like PuTTY for manually stepping through network communications?

Are there any tools that would allow me to "manually" step through the network-stack processes of a device connecting to a network and communicating with other devices? Similar to using PuTTY to ...
1
vote
2answers
213 views

VyprVPN (from GlodenFrog.com) weirdly keeps sending unauthorized suspecious data even after uninstall [closed]

Update: Check the VyprVPN's app developer answer below, seems this is okay and an uninstaller is added to new versions to prevent such issues. Original: I was working with VyprVpn a few months ago, ...
1
vote
0answers
69 views

Host-based security architecture for web server network

I am begining with network security and after studying for a while about often used technologies I got to this architecture for my home server (sorry it is not in english). I considered 3 basic ...
0
votes
0answers
102 views

Should I use a VM firewall or not?

I am managing a couple of VPS-es on an old platform I would like to no longer maintain. We used a widely used commercial VPS control panel to create the VPS-es in question. The customers may ...
1
vote
2answers
91 views

NMap to scan a private subnetwork

I have a test network setup based on virtual machines. My host machine, a web server and the firewall is under the 192.168.0.0/24 network (gateway is 192.168.0.1); a server machine is located behind ...
4
votes
1answer
205 views

Is it possible to sniff traffic of a remote network? (With admin access to router)

Me and a friend of mine are simulating a widespread scenario where router configurations are untouched (default passwords) and are visible from the internet. Him, acting as the victim, will constantly ...
0
votes
1answer
60 views

Can I tell if a python script is secure from transmitting sensitive data by analyzing its imports?

A thought experiment My goal is to know whether, and how, a 3rd party python script that may be entrusted with sensitive information, can be trusted on a fundamental level. Basically this question ...
1
vote
1answer
98 views

running botnet for analysis

I a very curious to understand botnets practically. I want to run a p2p botnet (storm or waledac) for analysis and learning. I have mainly two issues: Where can i get access to binaries of either ...
0
votes
3answers
129 views

Is my LAN infected?

I don't know if this is the right place for this question but here it goes... When I access websites that have Google ads included with a device (pc, tablet, laptop) connected to my LAN, these ads ...
0
votes
1answer
100 views

Analyzing a TLS connection?

Suppose I want a secure TLS communication between me and myschool.edu. Which of the following should I trust to preserve confidentiality, integrity, and authenticity. Here are the options and my ...
2
votes
1answer
135 views

Forensics - trace back DNS query origin on host?

So I tried to search the web for answers but didn't find any. Is there any way to trace back which exe file or application caused the computer to make a specific DNS query?
18
votes
3answers
1k views

Are open wireless networks unencrypted?

When you connect to an open wireless network (that is, a wireless network without any symmetric password set) is there any sort of secure key exchange going on, or is data sent back and forth ...
2
votes
2answers
65 views

Can a website detect which method you are using to connect (LL2P, SSTP and PPTP)

When you connect to a website using a VPN with the same IP however using a different type of connection each time (LL2P, SSTP and PPTP) can the website detect the difference between these connection. ...
2
votes
3answers
177 views

Most secure location of database

Let's say I have a straight forward completely database driven web site application and I store my database on my web server in the DMZ. I won't be broadcasting the IP address of my database because I ...
39
votes
5answers
6k views

Bring your own phone to a (new) job: Consequences?

I am starting a new job, and I have the choice to receive a phone from the company, or bring my own phone. I am considering using my own phone, to avoid having an extra device, but I want to better ...
2
votes
2answers
76 views

What will happen to my Windows PC if I visit a site from a network marked as malicious by google safebrowsing [closed]

Google rated a whole network in china as malicious: http://www.google.com/safebrowsing/diagnostic?site=AS:4134 Quite a few of our customers have their websites hosted in that network (e.g. ...
0
votes
0answers
39 views

How do TSC (TKIP sequence counter) calculate into WPA?

I'm reading about 802.11, from IEEE's pdf (IEE pdf), from page 1191, and in particularly I'm reading about TKIP. And to decrypt and to encrypt used a TSC (TKIP Sequence Counter) as you can see in ...
3
votes
2answers
153 views

How can you transmit data without revealing your location?

Anyone can pick up wireless transmissions without revealing their location, but transmitting is much harder. What types of wireless communication systems are there that a device can use to transmit ...
1
vote
1answer
68 views

How can I get EAPOL packet's number?

I need to work with EAPOL packets, and I have to distinguish between first, second, third and fourth... If I'm using WPA2 I can use the first 2 bytes of Key Information field, and I can use Key MIC, ...
11
votes
0answers
270 views

WPA2 ephemeral key derivation

I'm trying to learn how ephemeral keys in WPA2 4-way handshake are derived. Starting from 4 EAPOL packets sniffing, I successfully derived PMK and PTK reading ANonce, SNonce, and knowing ASCII-PSK ...
0
votes
2answers
108 views

Is there any reason that captive portal server can't block the ICMP echo request/reply packet

We can get connected to those public WiFi hotspot without the account but can access to no website but the login page. As I tested, all those login website would respond to my ping even I was an ...
-1
votes
4answers
405 views

How to find out if somebody is spying on my private browsing data in the same WiFi network? [closed]

I live in a hostel and eight people including me, are using the same WiFi network. One of my friends is a "computer wizard". I would like to know if he is secretly checking my browsing history and ...
3
votes
1answer
222 views

Secure Connection between two mobile (Android and/or iOS) devices

I've a Device A which will communicate with multiple devices on a network (BLE and/or NFC). All the devices will be handled a Token upon authentication which somehow needs to be transferred over to ...