Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

3
votes
3answers
198 views

What does a switch do against a packet sniffing attack?

I have heard that using switches in my network helps prevent against a packet sniffing attack but how does it help prevent the attack?
1
vote
1answer
54 views

DHCP Exhaustiation / Rogue DHCP interrupted by real DHCP NACK

I was trying to run a Rogue DHCP Server which should cause a MITM attack. I did the following Exhaust the real DHCP Server using DHCPig (worked) Run a Rogue DHCP Server using the ...
1
vote
2answers
114 views

Arp network (prevent mitm attack)

On my school network, using wireshark to see network traffic (filter=arp), I only see gratuitous packets. Meaning, all hosts on network send gratuitous packets (ex: gratuitous for 10.10.3.54, ...
-2
votes
1answer
119 views

Is rolling your own network protocol insecure? [closed]

By now, everyone on here should know that rolling your own crypto is bad. But what's about rolling your own (encryption supporting) network protocol? I'm working on an open-source project (by now ...
3
votes
1answer
400 views

How can Port Stealing be used as a MiTM attack?

I read about and tried a lot of MiTM attacks but I just don't get how Port Stealing can be used as a MiTM attack. In my understanding one can "steal" a Port by sending Ethernet Frames faking the ...
8
votes
6answers
2k views

Dual Router Configuration

I have a home network that was hacked into recently. The people that got into my network actually accessed my personal files and although I cannot prove it, I think they might have stolen some of ...
1
vote
1answer
36 views

How to isolate web console of network switch from LAN where they working

Network switches on my work have web console. Despite it is password protected I want to hide it from LAN. Currently switches has static IP with mask that differ from DHCP server, so they not visible ...
6
votes
1answer
596 views

Message signing disabled (dangerous, but default)

Over the last couple of years, I've developed a fairly keen interest in Penetration Testing & Information Security. Throughout this time, I've acquired (and accumulated) a range of different ...
3
votes
1answer
157 views

Setting up a honeypot to detect malicious network activity

So in the world of networks, people try to gain access to the client machine and perform lateral movement. Honeypots are often used to give them an easy access point and show them an unfavorable or ...
2
votes
1answer
87 views

When I connect my PC to a network, what (meta) information can the router/admin see that identifies my PC?

If I connect my Windows 7 PC to a third-party (wireless) network what information might the network admin be able to obtain about me? I know they can (sometimes) see traffic but that's not an issue ...
2
votes
1answer
99 views

How does an entity on a network (e.g. sysadmin, security software) identify that a user is connecting to the internet with a proxy?

For example, the security software iBoss is able to detect if you are using a proxy. Proxy Circumvention Proxy attempts to circumvent your Internet security solution not only violate your ...
2
votes
1answer
136 views

Can the windows Remote Procedure Call subsystem be modified from the default without causing Windows 8/8.1/10 to break?

This is a question that personally as a security professional has bugged me for a long time. So, a default Windows installation, from XP up to 10, typically has a few services listening on the ...
1
vote
3answers
183 views

Separate networks on one modem for security reasons

I'm not very familiar with networking issues, but my current project requires me to create an environment in which I will have 2 clients, but client 2 cannot see where client 1 is connected to and ...
1
vote
3answers
148 views

Does NAT really provide security? [duplicate]

I had an argument with someone on IRC about Network Address Translation. I was under the impression that NAT provided a layer of security to internal networks. I understand that's not the primary ...
-5
votes
1answer
102 views

Security Setting up personal web server [closed]

I'm sure something like this has been asked many many times over the Internet. I'm asking again because I need situation-specific response. I've already set up a home web server. My setup is like ...
3
votes
2answers
94 views

Custom http server security concerns

I am using a framework called VERTX to create an HTTP server. This is different from a traditional web server such as APACHE or NGINX. Here I will simply be using JAVA code to create a HTTP server ...
3
votes
0answers
70 views

Are mobile phone calls cached by the network? [closed]

While transmitting a phone call from one mobile phone to another across several carriers, I assume it may be necessary to buffer the audio data for a few seconds. My questions: a) Is it true, ...
3
votes
2answers
253 views

how can an attacker access a system through a compromised router?

Let's say an attacker gained access to the admin panel of a home router with port 21, 23 and 80 open. I mean the attacker has full control over the router, thus being able to port forward, etc... ...
1
vote
1answer
111 views

Strange IP's on my firewall log

Check the screenshot of my router firewall log below, I can see traffic originating from strange IP addresses to my public address. What are these? I've just setup this router few hours ago, am I ...
11
votes
4answers
3k views

How to break MAC address filtering?

If a MAC filter prevents you from connecting to a network, how can you break it or include your device's MAC in that filter?
1
vote
2answers
89 views

Device visibility on a network

At my college dorm's Wi-Fi network, one device can play to any other network-connected, YouTube-enabled device on that network. Apple devices can also AirPlay to the one Apple TV connected here. How ...
2
votes
1answer
199 views

Network setup for malware analysis lab in a corporate view

I am planning to setup a malware analysis lab in the Incident Response team of the company I work for. As I am basically a malware analyst I some how managed to get up with the malware analysis lab ...
2
votes
2answers
255 views

TCP- or UDP-based Port Scans, IP Fragmented Packet

Is this normal or is someone trying to hack/attack me? How can I stop this? My router is a Cg3000v2 netgear provided to me by Optus. [TCP- or UDP-based Port Scan]411 Wed Aug 26 00:28:08 2015 ...
-4
votes
1answer
139 views

How to see all incoming and outgoing traffic of other nodes while on a LAN?

I've got two computers. A & B. While sitting on the computer A how can I see the incoming and outgoing traffic of computer B? Or can I? Note: Please try to answer in a non-technical language as ...
1
vote
1answer
113 views

Does the carrier network autheticates itself to the SIM card?

From my understanding this is how SIM authentication works: When the mobile device starts up it obtains IMSI from the SIM card and send it to the operator network Operator network finds the Ki(128 ...
1
vote
1answer
185 views

Network security from the inside

Yesterday I heard some people talking about not allowing users to RDP into servers they shouldn't and such which got me thinking about my companies network and the security of it. Can someone point ...
0
votes
0answers
29 views

Options to protect an outbound initiated connection IP?

Consider a service that has 3 separate organizations in a SaaS model. The end user(#1) connects to the first provider(#2) and then initiates a function from within the #2 that connects directly to ...
0
votes
1answer
69 views

Is it possible to setup a rogueAP that indicates it is encrypted with WPA2 but in fact is open?

I want to create an exact duplicate of an existing access point that use WPA2 AES (CCMP) for encryption so that the clients will automatcally be connected to my AP.So I uesd this command airbase-ng ...
1
vote
1answer
334 views

Why Skype discloses my IP address to anybody? [closed]

Apparently there is a Skype exploit that allows people to obtain your IP address through your Skype username if you're online. The problem has existed since 2012. There exists countless websites which ...
2
votes
3answers
149 views

Open ports with no services binded to them

I have been wondering, if a port is open for inbound connections on the firewall yet there is no service binded to it, would that be considered a security vulnerability?
3
votes
1answer
481 views

ARP poisoning and port forward together

Suppose these assumptions: Router IP address: 192.168.1.1 Router MAC address: 00:00:00:00:00:00 My IP address: 192.168.1.2 My MAC address: 00:00:00:00:00:01 Victim IP address: 192.168.1.3 ...
1
vote
1answer
58 views

Is there a vulnerability when TLS is decrypted, then encrypted with OpenSSL that is vulnerable to BEAST or CRIME?

Assume that the following TLS proxy exists User <-----> Load Balancer that decrypts, encrypts <------> WebServer Where the web server is running a vulnerable version of OpenSSL. Can ...
0
votes
5answers
2k views

How to send HTTPrequest anonymously [closed]

I want to send a HTTPrequest to a specific web address, but with different IP address. For example, if a webserver detect IP address, then add it to a database. If another request come from a IP, ...
2
votes
2answers
117 views

Preventing active OS fingerprinting with iptables

I'm studying network security on my own and I have a few basic theoretical questions here. Would dropping every incoming packet at the network layer be enough to prevent active OS fingerprinting? I ...
1
vote
2answers
143 views

Is this exploit on household appliances really as bad as it sounds?

CNN article link. The article claims that a household appliance can be hacked by reprogramming the circuits inside of it to release electromagnetic waves that could release system information, but ...
3
votes
3answers
268 views

How does Facebook really identify requests?

Today I have discovered something very strange. It seems like Facebook is playing some kind of unfair game for identifying one's online identity. So, here is what I have done: I have a regular ...
4
votes
5answers
462 views

Is encryption possible at the physical layer?

When we talk about encryption in relation to the OSI Model we usually hear about encryption at Application (Email - PGP), Transport (SSL), Network (IPSec) and even Data Link Layer (WPA). But I have ...
-3
votes
2answers
125 views

What can someone do to my computer with access to the modem?

I had to give my new neighbor my WiFi password. He's now connected to my internet and I worried about some things: The modem is connected to my PC. What can he possibly do while he's on my internet? ...
0
votes
2answers
184 views

Opened Ports on a Router attack vectors

I have read somewhere that it could be dangerous to use unknown networks because the router owner could open ports and attack programs that would run on the victim's system on precisely those ports. ...
7
votes
1answer
436 views

How to protect a Wifi network from Microsoft WiFi Sense

Microsoft is deploying a new feature, WiFi Sense, which provides users a way to easily share passwords to wireless networks with all of their contacts. This introduces a new security failure mode: a ...
0
votes
1answer
188 views

How separated should a management VLAN be from the production VLAN?

I was after a little bit of advice regarding Network Management. Users will enter the network and hit a remote desktop server. On from this, they will pass through firewalls to the core switch. When ...
4
votes
2answers
109 views

When should I drop a packet with ICMP type 3, code 9 or 10, TCP RST, or TCP ACK?

This answer says there are a few ways of dealing with a blocked packet at a firewall: At each of these levels a 1st IP packet (and any other protocol packet as an ESP or AH packet) might receive ...
1
vote
1answer
148 views

Private VPN server in public cloud

I need to encrypt all my traffic, because I often work in unsecure network environments. My questions is this: if I buy my server from VPS providers (amazon ec2, digitalocean, etc) - how secure ...
3
votes
1answer
239 views

Is this the end of malware use of DNS?

I read about the release of a free dataset of malware related DNS queries called "Predict". A researcher or network security team can download or query this data set and use it to identify malware ...
23
votes
2answers
2k views

How does this HTML5-based “Mass Router Infection” scheme work?

I read this article stating that purely through a website, "without any user interaction" mass router infection is (/was?) possible. I'm not sure that this problem still exists as it was posted 3 ...
4
votes
1answer
259 views

Is it possible to trace a backend through a reverse proxy?

I'm creating a reference network topology for a WebSocket chat application at work, and I'd like to have something clarified for my own understanding. The current topology involves a reverse proxy ...
1
vote
1answer
128 views

Encrypting layers of OSI

I was reading that WPA2-PSK encrypts layer 2 of the OSI network model. What is the danger of having this layer in plaintext (I know it can be decrypted very easily from within the network)? Is there a ...
2
votes
1answer
193 views

Why would a corporation NOT want to allow users on a corporate network to RDP to their specific desktops?

I have a multitude of users that are requesting the ability to RDP from other workstations, on the same network, to their specific desktop computers. I would like to know what the risks of this are ...
-3
votes
1answer
46 views

A collection of tests and demos for security headers and TLS configurations [closed]

There are (or have been) various websites designed to educate and provide examples on good / bad configurations of security headers and TLS configurations (e.g. https://badssl.com/) I want to build a ...
3
votes
2answers
298 views

Wireless password available in plaintext

Running below command in as admin from Windows : C:\Windows\system32>netsh wlan show profile name=MY_WIRELESS_NAME key=clear Outputs : Security settings Authentication : WPA2-Personal ...