Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

1
vote
1answer
72 views

What is the point of hosting database externally?

Following the breach of avast:forum.avast.com they decided to host the database externally@id.avast.com. My question is, what is the point of hosting the database externally since when you get remote ...
0
votes
1answer
174 views

is UPnP / NAT-PMP really necessary today?

The possibility to enable port forwards for any hosts inside the LAN has of course security implications. The problem from my point of view is not that there are bad users, but bad hosts/programs and ...
0
votes
1answer
95 views

Implementing MITM attack on MAN or WAN

Is it possible to implement MITM attack on larger networks than LAN? For example is is possible to implement such an attack on the whole network of an ISP?
0
votes
1answer
227 views

Should remote access (RDP/SSH) only be allowed for VPN clients? Or should RDP and SSH be opened the public?

I am about to push hard against the powers that be and strongly recommend that we shift our many (20+) consultants from direct public access to RDP & SSH to VPN clients (connecting to a ...
1
vote
1answer
119 views

How common are mitm attacks behind an ISP?

Yes. Of course using https everywhere is best. But sometimes that's not an option. In those cases, I'd like to make an informed decision. Is there any information about their prevalence? Or would that ...
1
vote
1answer
153 views

Is a firewall an access control list?

I want to know if a firewall is considered an access control list (ACL). I know there are other types of ACLs, but am specifically interested in knowing if a firewall is an ACL. Edit: It appears ...
1
vote
4answers
143 views

untangle server at work place privacy

When I am browsing in an environment where Untangle server is installed, can the network admin track everything I do? for example: Skype chat messages Personal emails (Gmail, Yahoo)
0
votes
1answer
73 views

What does this Snort rule do? [closed]

Rule-4: alert udp $EXTERNAL_NET any -> $HOME_NET 3333 (msg:"ET EXPLOIT Wireshark ENTTEC DMX Data Processing Code Execution Attempt 1"; content:"|45 53 44 44|"; depth:4; content:"|04|"; ...
1
vote
2answers
176 views

Hundreds of legitimate IPs are hitting my website like bots [closed]

I'm having a huge problem with my website due to a weird spike on hits. Today, i'm getting several hundred hits. Normally, i get a lot less, and they are from me country. Today's hits are from every ...
0
votes
3answers
51 views

Custom surveillance protection [closed]

I want to make a secure network because of government surveillance. Is there a way I can configure or build some type of custom hardware to be able to detect and to access the network, but only ...
-3
votes
2answers
55 views

Network camoflage-techniques of hiding networks [closed]

How are top secret networks hidden? What are the techniques to make a network hidden from the public?
0
votes
1answer
37 views

User Binding Request with credentials in Lync Dump

I've dumped a call between two lync clients and saw that there were some UDP packets that look like this: Server -> Client 1132 14.495362000 <serverip> <clientip> STUN 146 ...
21
votes
3answers
5k views

Are popular porn sites more likely to be infected with malware?

I'm trying to help my friend understand this because he believes that since a site is very popular, that it's less likely to infect its viewers because of its security! Is a popular site less likely ...
3
votes
2answers
389 views

How can I get a fiddler-style trace of an iPhone / Android?

I want to audit the HTTP and HTTPS activity of apps downloaded onto my mobile device. What is the best way to do this? I own the device, can add a root certificate, and can connect the running ...
3
votes
2answers
93 views

Public facing computers in a Media Lab

I've just taken over administering a lab of Apple computers on a university campus. We have about 15 computers and I've discovered that they all have public IPs and domain names. Even our printer is ...
0
votes
2answers
390 views

how can I stop someone from watching my internet history? [duplicate]

I use someone's wifi network. Is there anyway to stop him by getting my browsing information or can I somehow hide my browsing history from him?
0
votes
1answer
191 views

How secure is split tunneling on a VPN?

What protocols get encrypted and go through the VPN? Is it just port 80 and DNS traffic that does not go through the VPN? Does this impose any security risks by running a split tunnel? Making the ...
2
votes
1answer
252 views

what can hackers do with a hacked router?

In Malaysia, our service providers are giving us a router with remote-admin available. It has come to my attention that with a simple line I'm able to find out the routers username and password. I'm ...
3
votes
3answers
143 views

When downloading from an https web page - will the download also use ssl?

If I click on a download link on a page that uses ssl, will the download also use ssl? If the answer is not (or: sometimes yes, sometimes not) - is there any way I can force it to be protected? I'm ...
2
votes
3answers
185 views

How does Network Discovery OFF protect my computer?

Yes, it seems that the computer will not respond to pinging. But any computer with a packet sniffer will be able to see my ip once I send any packet to the router. So basically, if I'm surfing the ...
0
votes
1answer
112 views

Choosing the Path in IT Security [closed]

I graduated last year from an Informatics and Security degree program. This program was taken in a Canadian college. It equipped me with the basic security knowledge in all fields; networks, systems ...
2
votes
2answers
174 views

What prevents this session hijacking from occurring? (SMB/CIFS example)

SMB/CIFS (file sharing, Windows environment) I understand when a client connects to a server there is a challenge/response system in place. However, once the client is connected that "connection" is ...
0
votes
1answer
146 views

Firewall hole punching [closed]

I'm interested in doing my thesis on Firewall hole punching. Hole Punching: A way to exploit NAT to open a connection TCP or UDP between a Client and a Server. What I'm looking for is a reason this ...
0
votes
0answers
38 views

How can I get a list of unsigned plugins in openvas?

How can I get a list of unsigned plugins in openvas? Are those plugins safe for use? When I run the scan on a test machine with nasl_no_signature_check = no, I don't get any results(not even any ...
1
vote
1answer
91 views

Secure way of opening web page from iOS without need of logging in

I am developing an iOS application and web page, both use same Parse backend. Web page contains some functionality that is not available in the iOS application. Therefore I would like to present the ...
1
vote
4answers
368 views

How do exploits and payloads work together?

I knew about the metasploit framework since a few good years ago, but I never really got into it. I have some knowledge when it comes to networks, but I am not a PRO. I've tested some things with ...
2
votes
4answers
6k views

How to monitor my home network traffic?

I have an ATT U-Verse Wireless router supplying 5 computers throughout my home. It is hardwired to my main computer. I have three children of all ages, one of which has had a tendency to make poor ...
0
votes
1answer
128 views

Router level filtering on home network [closed]

I want to block some part of a website or some videos from dailymotion or other site video sites. Type of network I have 7-8 devices(PCs, Mobiles, iPhones & tablets) all connected to a router ...
1
vote
3answers
275 views

What exactly does one get from a Nmap Scan?

I know nmap is a port scanner and its output shows all the open ports, the services running on those ports, the underlying OS and technology, etc. What should one take from this result in easiest ...
4
votes
5answers
3k views

Is MAC address filtering effective on a wifi router? [closed]

I want to improve the security of my home wifi. My neighbor wants to crack my Wi-Fi password with a nutcracker. I tried to activate the protection by MAC address, but now my laptop and smartphone ...
0
votes
2answers
165 views

How common and how easy is sniffing plaintext communication?

So the first reason we give to encrypt content is to prevent against a man in the middle sniffing all data. That is the reason ssh is used and not telnet for example. But in today's networks where ...
0
votes
2answers
181 views

SSL Finished message contents

Hi everyone I'm little bit confused about contents of Finished Message used during Handshake Protocol.In particular this message (client/side) contains the connection-id originally sent from the ...
3
votes
5answers
555 views

Can teleworking let my boss to sniff my network traffic? What else could he do?

My boss proposed me to code from home on the their machines via internet, in two possible ways: I would connect to their computer and work on their machine, as if I was in front of the computer(from ...
31
votes
3answers
12k views

How do you stop a hacker when their IP address is 0.0.0.0?

Wordfence reports the following visitor: An unknown location at IP 0.0.0.0 visited 4 hours 45 mins ago IP: 0.0.0.0 Browser: Baiduspider version 2.0 Mozilla/5.0 (compatible; Baiduspider/2.0; ...
1
vote
2answers
278 views

Way to make “DNS unblockers” safe?

Many people who live outside the US use "DNS unblockers" such as Unblock-Us to access region restricted services such as Netflix and Hulu. My understanding of these services is that for DNS requests ...
0
votes
1answer
70 views

Secure end-to-end when part of conversation must be over HTTP

We have a situation where a user's identity can be verified as follows: the network provider knows the identity of the user and injects secure headers into the HTTP request, which our servers can use ...
1
vote
2answers
116 views

Using HTTPS, can the target domain be seen?

If I go to https://google.com/q=test_query with from my browser, what traffic can be seen on the router? Can the domain name (google.com) be seen? If so, can I block all of the traffic to a web page ...
4
votes
2answers
609 views

3G Femtocell at home: can anybody connect, and is all traffic encrypted?

At our office we have bad reception for 3G. We bought a Femtocell device that provides a 3G connection for one specific mobile provider. This device is connected to our network via ethernet. I cannot ...
2
votes
1answer
323 views

How can the Google web crawler bypass portals?

This is a situation that I have encountered on a number of occasions. I will conduct a web search in Google, a link to a file (.pdf for example) will take you to that file on the server. It opens up ...
0
votes
3answers
180 views

How to set iptables to drop packets that I'm not listening on?

I've got a Kali Linux box I use for pen testing. I would like to configure my machine to DROP incoming packets, but only when I'm not listening on them. e.g. if I run a netcat listener on port 80, I ...
2
votes
1answer
323 views

What is DDOS TCP KILL?

I've recently been introduced to Kali Linux's webkiller tool, located in the websploit category. It works on the concept of Tcpkill. I don't understand how the DoS attack with Tcpkill works. Can ...
1
vote
1answer
407 views

DNS settings compromised from WAN on Edimax ADSL router

My home network Edimax AR-7084gB ADSL modem/router with firmware verison 2.9.5.0(RUE0.C2A)3.5.18.0 was exploited from WAN few days ago. The attacker changed DNS server settings - primary server to ...
0
votes
1answer
183 views

What's gonna happen when all IPv4 changes to IPv6? [closed]

I was guessing what could happen when all IPv4 be changed to IPv6 , like pen-testing tools and network configuration for common users. Will all the IPv4 be automatically translated to a IPv6 new one ...
3
votes
1answer
227 views

De-auth attack Reason codes and possible reaction

I am learning about Deauth attacks and how they work. I see that the Deauth frame has a reason code which indicates the reason for the deauth. I have tested the attack with aircrack-ng and this reason ...
-2
votes
1answer
382 views

Can a sysadmin spy on a Wifi connection? [duplicate]

Is it possible that someone who is in charge of a network serving many users, can see what site we visited? I mean, we have only one internet connection, and we used WiFi to be connected. Is it ...
7
votes
2answers
379 views

LTE networks and MITM

2G would leave you vulnerable to spoofed base stations. 3G tried to somewhat fix that using mutual authentication. Now, I tried to check how LTE handles this but I couldn’t find any usefull ...
3
votes
1answer
294 views

Can I perform WEP cracking from several laptops against 1 AP

I have successfully being able to perform WEP key cracking attack using aircrack tool. I want to allow my students to test this in a lab environment. They will be working fro their own laptops against ...
5
votes
3answers
246 views

Is it a bad idea to share the ssh host key in a diskless environment?

I am looking at this cluster of student work stations. They are diskless clients which boot from NFS. They also have sshd enabled. All of these machines share the same ssh host key (rsa,dsa,etc), ...
1
vote
1answer
235 views

Computer worms, propagation and exploiting vulnerabilities

I have been referred here to ask this question, so I am doing a research on computer worms, I have been through several sites and a few caught my attention, I have learnt that worms propagate through ...
0
votes
0answers
197 views

OpenVPN and firewall configuration in LuCI

I'm trying to find the best (most secure) configuration for the firewall in OpenWRT. I'm using LuCi to configure all the stuff. I have successfully created a VPN (OpenVPN). It is supposed the best ...