Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

2
votes
4answers
662 views

Are custom protocols insecure?

So, I know rolling your own security is ill-advised, but for simplistic things like communicating with a home server, say, updating a grocery list, is a custom protocol fine? It won't be doing ...
1
vote
2answers
208 views

What security does an ISP provide for its customers?

I've heard that ISPs provide some kind of protection; using NAT and firewalls, to prevent hackers from using tools such as nmap to attack customers from over the Internet. What other technologies are ...
1
vote
0answers
67 views

Local lan drive by download

Basically, I'm testing a local network, on which I'm able to use ARP spoofing. I now want to try and infect one of the Windows boxes on the network with a backdoor. I could inject an iframe into their ...
0
votes
3answers
135 views

Local network proxy/spoof

Are intruders in a local network able to mask their local IP in any way? Could they 'hijack' another local IP and perform scans and exploits from there?
0
votes
2answers
547 views

Could a router protect our network or need we use an hardware firewall?

I am at a small firm (12 PC on the internal network). We use this network architecture now: Internet(Modem) --> Router --> Firewall --> Switch -- > Internal Network (clients PCs) ...
0
votes
0answers
21 views

What are the fields needed to check for SQLI, XSS, XSRF and Remote file inclusion attacks in apache access log file [duplicate]

I need to identify the SQLI, DoS, XSS attacks from log file. At which field these attacks will reflect in log file. Please suggest me some idea and send materials to me.
1
vote
3answers
169 views

Are there any exploits that would allow a user to “spoof” a screen capture system?

We have a security system installed that takes pictures of the client user's screen and sends them to a server. The pictures are saved until they get to the point where they are old enough to be ...
3
votes
3answers
393 views

Watching for applications like WireShark and other eaves dropping on corporate network

Are there ways to monitor and check for network monitoring like WireShark? Or would it just be more ideal to ensure every application uses SSL to ensure no employee or anyone could packet sniff ...
3
votes
3answers
636 views

Finding hidden cameras

Let's say Alice, Bob, and Mallory all live together in a house. Mallory decides to go on vacation, but before leaving, she decides to play a game with Bob and Alice. She makes two claims: She has ...
7
votes
1answer
171 views

Deanonymizing users by introducing structured delays to the network?

Here is a scheme for deanonymizing a user that I've been thinking about, just out of curiosity. I tried searching for it but didn't find much. Does this technique have a name? Are there any papers or ...
0
votes
1answer
725 views

Dual Firewall DMZ

We've just learnt about firewalls and DMZ and I'm struggling to understand how are these actually implemented ? The architecture we've learned was something like this: Let's say that we have a ...
2
votes
1answer
223 views

Does WPA2 Enterprise also authenticate clients to the 802.1X protected switch port?

In an 802.1X protected LAN, the switch port is usually set to "Multiple Hosts" mode and the access point is configured as an 802.1X supplicant which authenticates to the switch and "opens" the port. ...
2
votes
1answer
908 views

How the shopkeepers are getting MAC address of wifi enabled smartphones

It is clear that some big mall's are tracking all the wifi enabled mobile phones before they are connected to the network..how can it been done? I have the similar issue.. how to get the MAC address ...
10
votes
2answers
5k views

How to get MAC addresses of devices which are not in the network

Can I get MAC addresses of devices (mobile phones) which are near to my network but not connected to it? (Linux) I have been trying to get the MAC addresses of devices connected to my network through ...
0
votes
1answer
289 views

Are there any free, premade penetration testing labs? [duplicate]

I've already assembled a lab consisting of Kali, Metasploitable, and a Windows XP machine, but are they're any premade lab solutions available that offer up a bit more complexity or even predesignated ...
1
vote
1answer
169 views

Why ARP Poising is not working for some sites?

I am using following link for arp poisoning our Wireless LAN. http://www.irongeek.com/i.php?page=security/ettercapfilter But the thing is, it is working only for some sites. Even some some http sites ...
2
votes
3answers
123 views

Can MiTM and similar attacks be performed on separate networks

Okay, suppose that I have 2 computers: Computer A and Computer B, connected with this setup: A->switch->router->internet / B->router/ and the closest router to computer B is ...
0
votes
2answers
47 views

Will separating internet activity and offline activity secure a host?

Let the diagram below be a representation of a LAN. - let R be the interface between the LAN and the internet. - H be host connected to the LAN. - F be a firewall implemented using a virtual machine ...
1
vote
1answer
6k views

Router detecting port scan and ack flood attack

Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
2
votes
3answers
219 views

What are reasons why one shouldn't run Tor at a network level?

I've been considering proxying all web traffic on my network transparently through Tor and dividing up my bandwidth to share with the rest of the Tor network. Practically speaking, what are some of ...
1
vote
3answers
322 views

Could a neighbour see my traffic when we have cable Internet?

Is it possible that a neighbour could see my traffic (*), when we both have cable Internet? Or: Under which conditions might this be possible? I would assume, "Never!", but after reading these two ...
1
vote
4answers
190 views

Comprehensive audit of firewall - is Internet truly not accessible?

We have many Linux servers in several co-locations over the world. By design, these machines generally should not be able to access the Internet. Depending on location and role, some sites may have ...
2
votes
1answer
80 views

WLAN disconnected for sure?

If my PC has NO on-mainboard WLAN and there is NO WLAN-adapter card and NO USB WLAN-stick installed, how sure am I that there is really no WLAN connectivity possible ? I.e. can I really disconnect ...
0
votes
2answers
438 views

Can pipe | shell | nc > pipe achieve remote shell?

In one of the articles I have came across an exploit of Dell devices that said when you trigger the following line of code (executed somewhere in php) you will get a remote root shell : mkfifo ...
2
votes
2answers
965 views

wireshark does't show HTTP requests from other devices

My machine along with several other machines are connected to wireless router. When i open some http page on same machine(M1) where wireshark is installed, it captures the packets such as HTTP GET or ...
2
votes
1answer
256 views

DNS: Conditional Forwarding

I'm currently attempting to track down a problem with a Websense Web Filter breaking SSL connections for sites in a conditional forward. To do this, I need to know exactly how a conditional forward ...
3
votes
1answer
139 views

How to deal with websites with poor encryption?

I'm trying to access a website over HTTPS. However, it appears that it uses weak encryption: specifically, RC4. Is there a way to improve the security of my connection to the website? I've been ...
1
vote
0answers
243 views

802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)

So I have read that 802.11 standard requires stations and APs to go through the authentication and association before communication can take place. I also know that WPA/WPA2 has its own authentication ...
1
vote
0answers
57 views

Multiple Independent level of security vs Multi-level security

I am looking for a way to isolate two different networks from each other. Suppose we have 2 different network (public and private). I am looking for a way to connect to these two network via single ...
9
votes
4answers
284 views

What are the main security considerations that must be taken into account if you intend on creating a (localised) whistleblower website?

Also: Is it something that can be achieved with limited funds? I ask because I am intrigued by the obstacles that are in place.
2
votes
2answers
316 views

Wireless Positioning System (WPS) works without Internet?

As I understood it (correct me if mistaken); Wifi Positioning System has a network of routers of some sort, and when I plug in my new device, by using existing devices whose locations are known, they ...
1
vote
1answer
153 views

What good does the Kerberos Authentication Server

I currently try to understand the Kerberos protocol. And I think I understand the parts of it. How Alice gets a ticket from the Authentication Server to authenticate herself to the ticket granting ...
3
votes
3answers
1k views

How to check if URL/ IP belongs to a zeus bot

I have a set of URL's which might be Zeus hosts / C&C servers since my security appliance says so. Is there a way to check if these really belong to Zeus?
0
votes
1answer
120 views

Is there a way of determining if tor is running on a remote machine?

In most of the companies, IT guys block some sites and by using TOR or other VPNs people walk around these blocks and gain access to blocked content. My question is, assuming TOR is running on ...
1
vote
0answers
241 views

Proxy via pfSense and exclusions for DNS

I have posted this to NetworkEngineering.SE, as that seems the more suitable audience for this question. I will leave this question open here but am happy to see it closed. I just did not want to ...
1
vote
0answers
131 views

Disable HNAP on D-Link router

I'm concerned that Home Network Administration Protocol (HNAP) is a serious vulnerability that exposes consumer network routers to remote management by malicious entities such as government ...
1
vote
1answer
125 views

Are Internet speed tests an attack vector?

I've been performing lots of speed tests lately due to, among some other random things, an Internet programming class and getting Google Fiber hooked up. Then I realized that SpeedTest.net uses a ...
0
votes
2answers
155 views

Proxy traffic via MITM script

I want to log and modify outbound traffic on a Linux machine. I currently have one program that sends requests out to the internet, I would like to process these requests and their responses via ...
0
votes
1answer
70 views

Bridged routers security

I am trying to secure my network from some infected computers(the owners dont seem to understand what security means) So I have a second router to make a bridge. What would be the best approach at ...
-2
votes
2answers
237 views

What if I've been hacked and my IP is static? [closed]

My computer has a rootkit of some sort and the attacker can see everything that I do on it. I need it to do something related to banking, so I have to secure my computer first. I have a CD of windows ...
1
vote
1answer
108 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
2
votes
0answers
211 views

What causes wifi network connections to timeout? [closed]

i was wondering what actually causes wifi network connections to timeout. for instance, say my laptop is connected to my wifi and i yank the battery out such that my laptop can't send any proper ...
2
votes
1answer
58 views

How to calculate CVSS of an attack so that it matches those in CVEs?

I have drawn an attack graph for a file-sharing application (eg. Dropbox) where a database stores details of virtual machines Eg. memory space left, etc. I've listed some possible attacks: The ...
1
vote
3answers
43 views

Splitting IP suite?

Is it possible to split the TCP/IP suite layers? I mean to get the original data packet with its all headers & trailers out of the Link Layer before delivering them to the physical medium, and ...
0
votes
2answers
444 views

What could be the reason for the high traffic on the local network? [closed]

In our small company we have very high traffic outbound from local network to server which is getting blocked, and slow downs our server respond time. Especially at night. I am not security ...
1
vote
1answer
341 views

How should IPSec be configured to provide a protection at least as good as my current Stunnel configuration?

In private network (as in using a private IP address space) at a cloud provider, other customers have access to the same private network. I have secured the communication between many hosts and ...
7
votes
3answers
8k views

Detecting(and locating) rogue DHCP server on a local area network

How would we detect and locate a rogue DHCP server on our local area network?
0
votes
1answer
228 views

How CDN operator will decide content fo me if i am using google public DNS [closed]

As i saw most of the internet is being load balanced even at DNS . And DNS load balancers takes decision on behalf of client's DNS . So I Am just curious to know if i will use 8.8.8.8 as nameserver in ...
1
vote
1answer
117 views

Internet monitoring and DNS encryption

If someone hides their DNS traffic by encrypting it with a service such as OpenDNS's DNSCrypt, would you still be able to see which URLs they're viewing? Also, if that person uses HTTPS 100% of the ...
1
vote
3answers
222 views

Malware stole an executable file on my computer? Seems unlikely

If you don't want to read all of the details, skip to the bottom; I'll make a summary. I created a computer program as a proof of concept (I threw it together in 12 hours, so I wrote it in Visual ...