Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

1
vote
1answer
195 views

If I have my neighbors wireless router password, can I access his data with a smartphone?

My neighbor gave me his wireless router password to use on my smartphone. Using this, can I access any of his accounts whether it's his bank account or Att/Direct TV account? I ask because I think ...
1
vote
1answer
97 views

best practices for storing retrievable passwords

I am trying to build a NMS (network management system) and I am required to store passwords for 3rd party databases, devices and servers that are being managed (not user passwords). These passwords ...
3
votes
3answers
193 views

What does a switch do against a packet sniffing attack?

I have heard that using switches in my network helps prevent against a packet sniffing attack but how does it help prevent the attack?
-1
votes
2answers
53 views

Prevent fake gateway device attached to PC's network card

Office. Several PCs with Linux. Internet is limited on gateway level, so nobody could do POST-requests over HTTP. We prepared several measures to prevent data leakage on infrastructure level, but ...
42
votes
5answers
7k views

Bring your own phone to a (new) job: Consequences?

I am starting a new job, and I have the choice to receive a phone from the company, or to bring my own. I am considering using my own phone, to avoid having an extra device, but I want to better ...
1
vote
1answer
53 views

DHCP Exhaustiation / Rogue DHCP interrupted by real DHCP NACK

I was trying to run a Rogue DHCP Server which should cause a MITM attack. I did the following Exhaust the real DHCP Server using DHCPig (worked) Run a Rogue DHCP Server using the ...
1
vote
2answers
113 views

Arp network (prevent mitm attack)

On my school network, using wireshark to see network traffic (filter=arp), I only see gratuitous packets. Meaning, all hosts on network send gratuitous packets (ex: gratuitous for 10.10.3.54, ...
1
vote
1answer
111 views

Strange IP's on my firewall log

Check the screenshot of my router firewall log below, I can see traffic originating from strange IP addresses to my public address. What are these? I've just setup this router few hours ago, am I ...
-2
votes
1answer
118 views

Is rolling your own network protocol insecure? [closed]

By now, everyone on here should know that rolling your own crypto is bad. But what's about rolling your own (encryption supporting) network protocol? I'm working on an open-source project (by now ...
3
votes
1answer
387 views

How can Port Stealing be used as a MiTM attack?

I read about and tried a lot of MiTM attacks but I just don't get how Port Stealing can be used as a MiTM attack. In my understanding one can "steal" a Port by sending Ethernet Frames faking the ...
8
votes
6answers
2k views

Dual Router Configuration

I have a home network that was hacked into recently. The people that got into my network actually accessed my personal files and although I cannot prove it, I think they might have stolen some of ...
4
votes
5answers
6k views

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

As far as I can tell based on the reading I've done so far, WPA2-Enterprise uses the same encryption and security algorithms and methods as WPA2-PSK, with the addition of using another service for ...
14
votes
8answers
9k views

Why is ARP poisoning killing all network activity?

Using ettercap and ARP poisoning, I was able to eavesdrop on other connections, but suddenly I was unable to make any connection to the Internet. To restore Internet connectivity, I had to restart my ...
7
votes
3answers
6k views

What makes the Blackberry device and network more secure?

One of Blackberry's strongest assets is the "network" that it uses. Can someone explain, or link to technical information that covers what this secure network is, and what it does better than the ...
1
vote
1answer
35 views

How to isolate web console of network switch from LAN where they working

Network switches on my work have web console. Despite it is password protected I want to hide it from LAN. Currently switches has static IP with mask that differ from DHCP server, so they not visible ...
7
votes
2answers
6k views

How to be safe from wifikill!

I recently found that my friend is using wifikill apk on his rooted android and I would like to get rid of that software as I always get kicked from my wifi. I have to give him the password of my wifi ...
1
vote
3answers
1k views

Could a neighbour see my traffic when we have cable Internet?

Is it possible that a neighbour could see my traffic (*), when we both have cable Internet? Or: Under which conditions might this be possible? I would assume, "Never!", but after reading these two ...
3
votes
1answer
152 views

Setting up a honeypot to detect malicious network activity

So in the world of networks, people try to gain access to the client machine and perform lateral movement. Honeypots are often used to give them an easy access point and show them an unfavorable or ...
16
votes
4answers
2k views

What security mechanisms are used in BGP and why do they fail?

I just read about Indosat trying to take over the Internet by mistake. I read on a Polish infosec-related website that most of their announced routes failed to propagate, but some of them reach the ...
2
votes
1answer
85 views

When I connect my PC to a network, what (meta) information can the router/admin see that identifies my PC?

If I connect my Windows 7 PC to a third-party (wireless) network what information might the network admin be able to obtain about me? I know they can (sometimes) see traffic but that's not an issue ...
1
vote
3answers
182 views

Separate networks on one modem for security reasons

I'm not very familiar with networking issues, but my current project requires me to create an environment in which I will have 2 clients, but client 2 cannot see where client 1 is connected to and ...
2
votes
1answer
99 views

How does an entity on a network (e.g. sysadmin, security software) identify that a user is connecting to the internet with a proxy?

For example, the security software iBoss is able to detect if you are using a proxy. Proxy Circumvention Proxy attempts to circumvent your Internet security solution not only violate your ...
1
vote
3answers
144 views

Does NAT really provide security? [duplicate]

I had an argument with someone on IRC about Network Address Translation. I was under the impression that NAT provided a layer of security to internal networks. I understand that's not the primary ...
3
votes
1answer
160 views

User Binding Request with credentials in Lync Dump

I've dumped a call between two lync clients and saw that there were some UDP packets that look like this: Server -> Client 1132 14.495362000 <serverip> <clientip> STUN 146 ...
5
votes
1answer
2k views

Is there a way to block all TOR traffic incident on my public servers?

I don't want any connections coming from a tor network to be accepted by my servers.
18
votes
6answers
2k views

What security risks does IP spoofing bring?

By manipulating the TCP packet and changing the source address one is able to spoof the IP. As I understand it, you will not be able to set up a full handshake by doing this, as you will never receive ...
7
votes
3answers
1k views

How do I identify an unknown port/protocol that my IDS picks up?

Googling a port and protocol leads to a terse description at best, and a link farm in the average case. Most protocols on assorted, unknown high ports contain little or no plain text, and often if ...
10
votes
4answers
2k views

Why don't ISPs filter on source address to prevent spoofing?

I'm under the impression that if all the ISPs were required to filter on the source IP address of all outbound packets, that spoofing would be reduced considerably. Are any ISPs implementing this ...
-5
votes
1answer
99 views

Security Setting up personal web server [closed]

I'm sure something like this has been asked many many times over the Internet. I'm asking again because I need situation-specific response. I've already set up a home web server. My setup is like ...
3
votes
3answers
173 views

Segregating a Printer in my Enterprise Network

I have a EAP-TLS network at home which I've managed for some time now. I just got a new Brother HL-5470 printer so I can finally print things at home, which is really nice. The only problem is that ...
5
votes
2answers
215 views

Ideas on how I can fragment captured network traffic?

I am trying to create a lab environment where I can analyze common IDS solutions (starting with Snort specifically) and their ability to reassemble fragmented IP trains. I have a collection of ...
3
votes
2answers
92 views

Custom http server security concerns

I am using a framework called VERTX to create an HTTP server. This is different from a traditional web server such as APACHE or NGINX. Here I will simply be using JAVA code to create a HTTP server ...
2
votes
1answer
182 views

running botnet for analysis

I a very curious to understand botnets practically. I want to run a p2p botnet (storm or waledac) for analysis and learning. I have mainly two issues: Where can i get access to binaries of either ...
3
votes
0answers
69 views

Are mobile phone calls cached by the network? [closed]

While transmitting a phone call from one mobile phone to another across several carriers, I assume it may be necessary to buffer the audio data for a few seconds. My questions: a) Is it true, ...
3
votes
2answers
249 views

how can an attacker access a system through a compromised router?

Let's say an attacker gained access to the admin panel of a home router with port 21, 23 and 80 open. I mean the attacker has full control over the router, thus being able to port forward, etc... ...
14
votes
2answers
739 views

How does the Copyright Alert System work? Who has implemented it?

Some ISPs are participating in a Copyright Alert System that notifies content authors of violations of their copyright. I'm concerned how this oversight relates to my private traffic, and what laws ...
43
votes
1answer
204k views

Why can you bypass restricted WiFis by adding “?.jpg” to the URL?

I recently read an article on Hacking a commercial airport WLAN. It's basically about circumventing paid airport WiFi redirections (they redirect you to a certain URL when you type something in the ...
11
votes
4answers
2k views

How to break MAC address filtering?

If a MAC filter prevents you from connecting to a network, how can you break it or include your device's MAC in that filter?
1
vote
2answers
85 views

Device visibility on a network

At my college dorm's Wi-Fi network, one device can play to any other network-connected, YouTube-enabled device on that network. Apple devices can also AirPlay to the one Apple TV connected here. How ...
2
votes
2answers
251 views

TCP- or UDP-based Port Scans, IP Fragmented Packet

Is this normal or is someone trying to hack/attack me? How can I stop this? My router is a Cg3000v2 netgear provided to me by Optus. [TCP- or UDP-based Port Scan]411 Wed Aug 26 00:28:08 2015 ...
1
vote
1answer
168 views

Network security from the inside

Yesterday I heard some people talking about not allowing users to RDP into servers they shouldn't and such which got me thinking about my companies network and the security of it. Can someone point ...
-4
votes
1answer
135 views

How to see all incoming and outgoing traffic of other nodes while on a LAN?

I've got two computers. A & B. While sitting on the computer A how can I see the incoming and outgoing traffic of computer B? Or can I? Note: Please try to answer in a non-technical language as ...
1
vote
1answer
110 views

Does the carrier network autheticates itself to the SIM card?

From my understanding this is how SIM authentication works: When the mobile device starts up it obtains IMSI from the SIM card and send it to the operator network Operator network finds the Ki(128 ...
0
votes
2answers
202 views

Identifying the correct SSID [duplicate]

Suppose a Wi-Fi network is present with a given SSID. Now I create a hotspot with the same SSID as that of the original network. If a user tries to connect to the Wi-Fi, which one will he connect to? ...
8
votes
2answers
12k views

Recommended Cipher Suites for TLS 1.0, 1.1 and 1.2

There are a lot of cipher suites defined in the in the specifications itself of TLS 1.0, 1.1 and 1.2. And furthermore, there exist RFCs which add even more cipher suites to a specific version (e.g. ...
0
votes
0answers
28 views

Options to protect an outbound initiated connection IP?

Consider a service that has 3 separate organizations in a SaaS model. The end user(#1) connects to the first provider(#2) and then initiates a function from within the #2 that connects directly to ...
37
votes
7answers
62k views

What is the difference in security between a VPN- and a SSL-connection?

I would like to design a client-server application where the server is placed on Internet. I assume that I could set up the client-server connection using VPN (is it using IPSec?) or using a SSL ...
3
votes
1answer
476 views

ARP poisoning and port forward together

Suppose these assumptions: Router IP address: 192.168.1.1 Router MAC address: 00:00:00:00:00:00 My IP address: 192.168.1.2 My MAC address: 00:00:00:00:00:01 Victim IP address: 192.168.1.3 ...
0
votes
1answer
69 views

Is it possible to setup a rogueAP that indicates it is encrypted with WPA2 but in fact is open?

I want to create an exact duplicate of an existing access point that use WPA2 AES (CCMP) for encryption so that the clients will automatcally be connected to my AP.So I uesd this command airbase-ng ...
33
votes
4answers
13k views

Is there any meaning in only allowing port 80 and 443 today?

It's become standard fare for security minded organisations to block everything other than 80 and 443. As a result, more and more applications (other than web browsers) are learning to use these ports ...