Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

3
votes
3answers
822 views

Enumerate the subdomains of a given domain - what's the point?

There're a number of security tools out there that enumerate the subdomains of a given domain. I wonder: What's the purpose of that in terms of security / hacking? Is there any way to do that other ...
0
votes
2answers
79 views

Client misunderstanding nmap [closed]

My client wants their public facing IP addresses to be secure, but thinks that running nmap port scans will draw attention from hackers. To settle this once and for all, what do you say?
1
vote
2answers
88 views

Cheap and efficient strategy to protect against professional attack?

With things like NSA or state sponsored attack, it seems that no one is safe from a technical point of view. Is there any efficient method or strategy to protect against them? My guess is that ...
-3
votes
1answer
32 views

Protection of information terminal running Windows OS [closed]

I need an information computer terminal to work 24/7 in a protected public area. Operating system is Windows POSReady 7 EVAL. I need this terminal to send HTTP messages to a single IP address in the ...
0
votes
1answer
14 views

Security risks for a simple network configuration screen in android [closed]

I am building an Android App that pulls chart information from a server where the connection is specified on this view Ideally, the end user will put in a valid host and port resulting in business ...
1
vote
1answer
129 views

Is it there any effective way to prevent shodan to access my webcams [duplicate]

Recently while browsing using shodan, I came across a search string to explore webcams. Some of the searches I carried out were: webcamxp city:city name webcamxp geo: longitude and latitude ...
0
votes
0answers
87 views

How 'private' is my setup?

I'm currently running QubesOS (so essentially a virtualized Fedora operating system), which I use to access an offshore VPS through I2P (using garliccat). I then route all my traffic through the VPS ...
1
vote
0answers
26 views

Migration from TDM to All IP: any security issues?

My phone operator is slowly abandoning TDM (Time Division Multiplexing) to replace it with IP connections. What are the security risked related to this change? will all the phone line be like in a big ...
1
vote
1answer
58 views

Strange 'agetty' process running on my VPS.

Recently, I had to reinstall one of my VPS servers (again), due to malware. I took what I considered to be pretty good security precautions. I also locked the root account and am using sudo as well. ...
2
votes
2answers
102 views

Is creating a network bridge in order to connect a virtual machine to the internet insecure?

I have created a virtual machine using Hyper-V running OpenSUSE 13.2. In order to get an Internet connection on the virtual OS I created an external virtual switch. Windows 8.1 then automatically ...
1
vote
2answers
178 views

Hashcat does 1-7 numeric characters on brute force attack when specifying 8

I have Hashcat 0.49 on Kali Linux 1.1.0a and I have a .hccap file. It's a WPA2 Network in the file so I chose a mask of 8 numeric characters (?d?d?d?d?d?d?d?d) and instead of starting at 8 numeric ...
1
vote
1answer
452 views

secure use of psexec?

As of March 7, 2014 PsExec now "encrypts all communication between local and remote systems, including the transmission of command information such as the user name and password under which the remote ...
1
vote
2answers
77 views

Is it Safe to Send an Invalid Password Back to the Client?

It is common for websites to remember the username input value after an invalid login attempt but not the password input value. Take SE for instance. When I attempt to login with an invalid password: ...
9
votes
9answers
518 views

Which factors should you take into account when deciding whether users should be informed of a penetration test?

Say you are conducting a penetration test of an internal network. The internal network comprises of workstations, servers and company and contractor laptops. In an ideal world, the penetration test ...
1
vote
1answer
78 views

What this type of attack called? (gaining peripheral information)

When the intruder looks at the transmitted data and finds information about the sender and the receiver of the data or other peripheral information that won't help him hack the system but know more ...
82
votes
7answers
81k views

What is the difference between SSL vs SSH? Which is more secure?

What is the difference between SSH and SSL? Which one is more secure, if you can compare them together? Which has more potential vulnerabilities?
21
votes
7answers
1k views

Securing the security guy's home office: what should we do?

I read an article in the latest InfoSecurity magazine (an infosec trade rag by Elsevier) saying that us security professionals aren't necessarily taking the correct steps to protect our own home ...
3
votes
2answers
209 views

What is “Gateway Host Probe”?

I wanted to perform Stress Testing on my router using Metasploit to perform a TCP syn Denial Of Service attack. I have used the following commands: use auxiliary/dos/tcp/synflood set rhost ...
1
vote
5answers
58k views

How to effectivily block torrents on my network?

Hie, As per my network policy, we have to block all torrent traffic from network. To do this, I used to block all ports above 1024 on my firewall/proxy devices. But due to this, many other ...
1
vote
1answer
370 views

How to simulate network attacks and use wireshark to detect them?

I am working on a project which involves me to simulate a network attack and to use wireshark to detect the attack. DOS/MIM etc. I have found the following links that provided help but there are still ...
0
votes
0answers
50 views

Alternative to ECC for mobile security

I asked a question a couple of months back, which led me to ECC. The following question is in continuation: Current Setup: I've two devices A and B which need to interact with each other securely ...
0
votes
1answer
75 views

Snort - Rule: Alert all php requests

I am trying to understand writing rules for snort. Further goal is detection of sql injections like here. I've read the documentation of snort rules and created this rule: alert tcp any any -> ...
1
vote
2answers
159 views

Internet monitoring and DNS encryption

If someone hides their DNS traffic by encrypting it with a service such as OpenDNS's DNSCrypt, would you still be able to see which URLs they're viewing? Also, if that person uses HTTPS 100% of the ...
2
votes
0answers
42 views

please give me an specific example about “a lattice model of secure information flow”?

Currently I read the paper "A lattice model of secure information flow", but I think this paper is so abstract. Could you please give me an specific example and describe what the secure information ...
-4
votes
1answer
79 views

Does Server Mistrust improve security? [closed]

By server mistrust, I mean the fully implemented lack of customer plaintext on a vendor's system, and lack of vendor access to customer plaintext. Specific case in question: Password and SSH key ...
0
votes
2answers
60 views

Sniffing TLS / SSL through HSTS?

Imagine the following: Client C wants to communicate with server S. The evil attacker A is the Man-In-The-Middle. C sends a request to S, A intercepts it. A creates a self-signed certificate with ...
2
votes
3answers
168 views

Where is the most secure location to host an admin panel?

I have an admin panel on my site, that enables me to control the content on my website. In order for the admin panel to achieve this, I must have a connection to the site's database. I have two ...
4
votes
3answers
5k views

Doesn't an IP conflict occur when ARP spoofing?

I am playing around with Ettercap and ARP spoofing attacks. I have noticed that the computers that are involved in my attack not are displaying any messages telling that an IP conflict has occured. ...
0
votes
0answers
89 views

Could other people steal my Internet connection if they had my PPPoE data?

Would it be possible for other people to use my PPPoE data to get Internet access or is it somehow restricted to my house? Then what about my neighbors downstairs, could they do it? And what about ...
1
vote
3answers
61 views

Does sending image files in http in a secure application pose any risk? [duplicate]

I came across this scenario recently, where a mobile application used for banking is sending HTTP requests for GIF images and HTTPS requests for all other transactions. But the requests to the GIF ...
0
votes
1answer
149 views

TAILS or FREEPTO is better to stay anonymous on the net? [closed]

Which is safest for security and being anonymous in internet? I have heard TAILS is better because it was used by Snowden, but I don't really know FREEPTO.
6
votes
2answers
1k views

How to be safe from wifikill!

I recently found that my friend is using wifikill apk on his rooted android and I would like to get rid of that software as I always get kicked from my wifi. I have to give him the password of my wifi ...
-1
votes
4answers
573 views

How to find out if somebody is spying on my private browsing data in the same WiFi network? [closed]

I live in a hostel and eight people including me, are using the same WiFi network. One of my friends is a "computer wizard". I would like to know if he is secretly checking my browsing history and ...
7
votes
4answers
1k views

Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?

So I just learned about the jasager attack, via the wifi pineapple and it struck me immediately that it wouldn't work at all if network managers (privately) associated MAC addresses with hotspots and ...
1
vote
3answers
554 views

Install my own proxy

My school network has blocked a lot of webpages, including TeamViewer, which I need. The IT department told me to find a proxy, because it was their ISP who had blocked the sites. To connect to the ...
0
votes
2answers
138 views

Can I VPN a phone's connection to my home network, and then apply my home firewall to my phones network connections?

I have a decent firewall/router at home, and I was wondering whether it would be possible to use my home firewall for the connections that my phone makes, even when I'm not at home. It would mean ...
5
votes
3answers
1k views

Is it possible to catch a virus on my LAN without clicking on anything?

My unpatched PC running Windows is connected to a network which contains other "infected" computers, can I get infected by viruses without any interaction on my part?
14
votes
5answers
3k views

Are consumer-grade routers any more or less vulnerable? [closed]

I apologize if this is an obvious question, I'm not very familiar with hardware. I am planning on hosting a few personal websites from my home, but I'm concerned about my security. I'm using a fairly ...
1
vote
3answers
506 views

Can a network admin see my computer's screen if I'm logged into their wifi network?

I had a friend try to convince me today that simply by signing into a wifi network, without any physical access to your computer, the network admin can see your computer's screen. Obviously this is ...
0
votes
0answers
111 views

Should I use a VM firewall or not?

I am managing a couple of VPS-es on an old platform I would like to no longer maintain. We used a widely used commercial VPS control panel to create the VPS-es in question. The customers may ...
1
vote
1answer
197 views

Does VPN remote port forwarding compromise the anonymity of the VPN user?

An anonymous VPN service will typically assign the same public IP address to many VPN users. This procedure ensures that a connection cannot be traced back to the VPN subscriber: behind the veil of ...
3
votes
3answers
2k views

What risks are involved in exposing our home computers over the public internet?

I'm currently running a webserver from home accessible on the public internet via a static IP. What kind of risks are there in doing so? From what I understand, the setup will not allow connections ...
7
votes
2answers
693 views

Does DNSSec have any benefit if used with IPSec-enabled IPv6?

I'm not sure if the RFC's support a IPSec-only implementation of DNS, but if it does, what does that mean for DNSSec? Is DNSSec an IPv4-only technology?
3
votes
1answer
110 views

Any tools like PuTTY for manually stepping through network communications?

Are there any tools that would allow me to "manually" step through the network-stack processes of a device connecting to a network and communicating with other devices? Similar to using PuTTY to ...
3
votes
4answers
3k views

What reputable site should I download Putty from?

I recently did a Bing search for Putty and can only guess at which distribution is "trusted", contains no malware, or sleuthing code. If you needed to download Putty for a high security Windows ...
1
vote
2answers
246 views

VyprVPN (from GlodenFrog.com) weirdly keeps sending unauthorized suspecious data even after uninstall [closed]

Update: Check the VyprVPN's app developer answer below, seems this is okay and an uninstaller is added to new versions to prevent such issues. Original: I was working with VyprVpn a few months ago, ...
1
vote
0answers
79 views

Host-based security architecture for web server network

I am begining with network security and after studying for a while about often used technologies I got to this architecture for my home server (sorry it is not in english). I considered 3 basic ...
1
vote
2answers
96 views

NMap to scan a private subnetwork

I have a test network setup based on virtual machines. My host machine, a web server and the firewall is under the 192.168.0.0/24 network (gateway is 192.168.0.1); a server machine is located behind ...
5
votes
2answers
2k views

Event monitoring for a home network

I'd like to utilise some of the free SIEM type products out there to increase the chances that I will detect attacks and compromises of any of the devices on my home network. Most of my home devices ...
3
votes
2answers
879 views

Is it possible to block url using manageable switch

I want to block some specific Urls and DNS addresses. I am thinking if i buy a manageable switch (More specific would be TLSF1024D) what can i do to block some sites, and specific urls like ...