Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

0
votes
1answer
74 views

Is it possible to setup a rogueAP that indicates it is encrypted with WPA2 but in fact is open?

I want to create an exact duplicate of an existing access point that use WPA2 AES (CCMP) for encryption so that the clients will automatcally be connected to my AP.So I uesd this command airbase-ng ...
2
votes
1answer
347 views

Why Skype discloses my IP address to anybody? [closed]

Apparently there is a Skype exploit that allows people to obtain your IP address through your Skype username if you're online. The problem has existed since 2012. There exists countless websites which ...
4
votes
3answers
197 views

Open ports with no services bound to them

I have been wondering: if a port is open for inbound connections on the firewall yet there is no service bound to it, would that be considered a security vulnerability?
3
votes
1answer
623 views

ARP poisoning and port forward together

Suppose these assumptions: Router IP address: 192.168.1.1 Router MAC address: 00:00:00:00:00:00 My IP address: 192.168.1.2 My MAC address: 00:00:00:00:00:01 Victim IP address: 192.168.1.3 ...
1
vote
1answer
59 views

Is there a vulnerability when TLS is decrypted, then encrypted with OpenSSL that is vulnerable to BEAST or CRIME?

Assume that the following TLS proxy exists User <-----> Load Balancer that decrypts, encrypts <------> WebServer Where the web server is running a vulnerable version of OpenSSL. Can ...
0
votes
5answers
3k views

How to send HTTPrequest anonymously [closed]

I want to send a HTTPrequest to a specific web address, but with different IP address. For example, if a webserver detect IP address, then add it to a database. If another request come from a IP, ...
2
votes
2answers
131 views

Preventing active OS fingerprinting with iptables

I'm studying network security on my own and I have a few basic theoretical questions here. Would dropping every incoming packet at the network layer be enough to prevent active OS fingerprinting? I ...
1
vote
2answers
146 views

Is this exploit on household appliances really as bad as it sounds?

CNN article link. The article claims that a household appliance can be hacked by reprogramming the circuits inside of it to release electromagnetic waves that could release system information, but ...
2
votes
3answers
342 views

How does Facebook really identify requests?

Today I have discovered something very strange. It seems like Facebook is playing some kind of unfair game for identifying one's online identity. So, here is what I have done: I have a regular ...
5
votes
5answers
579 views

Is encryption possible at the physical layer?

When we talk about encryption in relation to the OSI Model we usually hear about encryption at Application (Email - PGP), Transport (SSL), Network (IPSec) and even Data Link Layer (WPA). But I have ...
-3
votes
2answers
138 views

What can someone do to my computer with access to the modem?

I had to give my new neighbor my WiFi password. He's now connected to my internet and I worried about some things: The modem is connected to my PC. What can he possibly do while he's on my internet? ...
0
votes
2answers
217 views

Opened Ports on a Router attack vectors

I have read somewhere that it could be dangerous to use unknown networks because the router owner could open ports and attack programs that would run on the victim's system on precisely those ports. ...
8
votes
1answer
445 views

How to protect a Wifi network from Microsoft WiFi Sense

Microsoft is deploying a new feature, WiFi Sense, which provides users a way to easily share passwords to wireless networks with all of their contacts. This introduces a new security failure mode: a ...
1
vote
1answer
283 views

How separated should a management VLAN be from the production VLAN?

I was after a little bit of advice regarding Network Management. Users will enter the network and hit a remote desktop server. On from this, they will pass through firewalls to the core switch. When ...
3
votes
2answers
128 views

When should I drop a packet with ICMP type 3, code 9 or 10, TCP RST, or TCP ACK?

This answer says there are a few ways of dealing with a blocked packet at a firewall: At each of these levels a 1st IP packet (and any other protocol packet as an ESP or AH packet) might receive ...
2
votes
1answer
174 views

Private VPN server in public cloud

I need to encrypt all my traffic, because I often work in unsecure network environments. My questions is this: if I buy my server from VPS providers (amazon ec2, digitalocean, etc) - how secure ...
3
votes
1answer
272 views

Is this the end of malware use of DNS?

I read about the release of a free dataset of malware related DNS queries called "Predict". A researcher or network security team can download or query this data set and use it to identify malware ...
24
votes
2answers
2k views

How does this HTML5-based “Mass Router Infection” scheme work?

I read this article stating that purely through a website, "without any user interaction" mass router infection is (/was?) possible. I'm not sure that this problem still exists as it was posted 3 ...
4
votes
1answer
334 views

Is it possible to trace a backend through a reverse proxy?

I'm creating a reference network topology for a WebSocket chat application at work, and I'd like to have something clarified for my own understanding. The current topology involves a reverse proxy ...
2
votes
1answer
194 views

Encrypting layers of OSI

I was reading that WPA2-PSK encrypts layer 2 of the OSI network model. What is the danger of having this layer in plaintext (I know it can be decrypted very easily from within the network)? Is there a ...
2
votes
1answer
198 views

Why would a corporation NOT want to allow users on a corporate network to RDP to their specific desktops?

I have a multitude of users that are requesting the ability to RDP from other workstations, on the same network, to their specific desktop computers. I would like to know what the risks of this are ...
-2
votes
1answer
48 views

A collection of tests and demos for security headers and TLS configurations [closed]

There are (or have been) various websites designed to educate and provide examples on good / bad configurations of security headers and TLS configurations (e.g. https://badssl.com/) I want to build a ...
2
votes
2answers
348 views

Wireless password available in plaintext

Running below command in as admin from Windows : C:\Windows\system32>netsh wlan show profile name=MY_WIRELESS_NAME key=clear Outputs : Security settings Authentication : WPA2-Personal ...
1
vote
2answers
355 views

Can I connect to a network without being detected? [closed]

Some people use software like whoisonmywifi and so on. Is there a way to bypass this software? I think it pings all IP addresses like 192.168.1.0/24 so it will ping all addresses. Can I disable ...
3
votes
1answer
106 views

Event codes for Unix [closed]

I have to write alerts in SIEM Tool. Do we have any events code for Unix as we have in Windows. If yes, where can I find that? If not, on what basis can we write alerts for unix flavours or ...
0
votes
0answers
52 views

How to monitor websites being visited on network? [duplicate]

I want to monitor the websites that are being visited on my wifi network by the different IPs connected to the network. Is there a way to do this, other than Wireshark?
0
votes
5answers
1k views

Monitor websites being visited on network

I need to monitor the websites being visited on my wifi network by the different IPs connected to the network. What is the best way to do this? I spent some time with Wireshark but I feel it is a bit ...
1
vote
1answer
111 views

Link(s) between subnet mask, IP address and subnet ID [closed]

I am studying CompTIA Security+ material and am struggling to understand the link(s) between a subnet mask, an IPv4 address and a subnet ID. The question that I'm working on is as follows: Your ...
0
votes
1answer
73 views

What kinds of attacks can VLAN's mitigate? [closed]

Assuming these very basic kinds of attacks: Header based Protocol based Authentication based Traffic based What would using a VLAN mitigate? Several people seem to be overthinking the question. ...
0
votes
0answers
112 views

SDN Security - why not attack the controller itself?

I have been looking into SDN (Software Defined Networking) and one advantage of using this is to be able to redirect traffic to stop DDoS attacks. The traffic is ultimately thrown away. My question ...
2
votes
2answers
83 views

Are documented networks easier to attack? Are undocumented networks easier to protect?

I am learning about network documentation for the first time and have come across the following statement: Undocumented networks might not be protected and can be used to support insider attacks. ...
2
votes
0answers
101 views

Ways to prevent traffic injection by ISP [closed]

I live in a big brother country (Egypt, but valid to many other countries), which apparently bought Hacking team and fin fisher software since couple of years. After reading about the very-easy ways ...
5
votes
3answers
856 views

How do RATs access computers through routers?

I've started trying to increase my networking security at my house. One thing that worries me (because other people in the house are always downloading viruses that come along with "free" games) are ...
2
votes
1answer
107 views

How can I detect subnets? [closed]

Given a WAN, which is connected to the internet via a single exit point. Inside this WAN, I don't want to have any subnet structures. Every user gets his own access point, which he can expand via ...
0
votes
3answers
689 views

Is it possible to get Network Domain from Client with PHP or Apache? [closed]

I'm working on a solution to identify client Network Domain or Workgroup in a private network. Based on it, I must change some access permissions. I can't do that through IP address because it isn't ...
3
votes
2answers
170 views

Share network with neighbor

My neighbor asked me if I wanted to share his network with me. Internet access is a little more expensive here than I am used to in my country. Before saying yes I wanted to know if I had risks in ...
5
votes
3answers
1k views

Is there a way to block your ISP from controlling the password of your main router?

I got internet installed at my home earlier today by Bright House Networks. When I asked the installation technician about changing the router administration password, he said that he can change it ...
1
vote
0answers
120 views

Web/search engine spider on local network?

I was setting up a test webserver on my local network earlier, and whilst sorting out the firewall I noticed the following in the log (/var/log/ufw.log - I'm using UFW on Ubuntu 14.04): Jul 9 ...
1
vote
0answers
239 views

Adding a binary to the firmware of a routing device [closed]

I've been playing around with a router d-link dwr-921 and found some vulnerabilities in the web interface. I still haven't managed to get shell access and now I'm thinking about modifying the firmware ...
2
votes
3answers
469 views

Is it possible to protect against rogue mobile base stations? [closed]

I just read the answer to this question Mobile numbers capture and transmit data and it sounds surprisingly simple for calls/SMS (and data?) to be intercepted by a fake base station. From what I ...
3
votes
1answer
51 views

Why doesn't netsplit riding work on single node networks?

I've been reading up on netsplit riding (a.k.a riding the split) and according to multiple sources, it's only a risk to multi server networks. Now I understand that a netsplit occurs when a node ...
8
votes
1answer
1k views

Does restricting the names of computers allowed to connect to a wifi network provide any security

In response to a statement elsewhere that MAC address filtering was essentially useless for protecting a wifi network because it was trivially by passable by network attack tools, I was asked if the ...
23
votes
8answers
5k views

Is there a way to make a WEP-secured AP uncrackable?

For some days, I was feeling that my Internet bill was booming. Then, I recently found out that a boy near my house was accessing my router to use the Internet. Then, I read some articles how to crack ...
0
votes
1answer
245 views

WEP password cracking

I was testing WEP password cracking on my router. I had set a thirteen character password ("TESTING123456") and tried these commands: airmon-ng start wlan0 Then I started airodump-ng using this ...
0
votes
3answers
73 views

Why is shared less secure than open when it comes to WEP?

According to this post, Jeffrey Tippet (Microsoft employee) writes: WEP can run in two modes: shared and open. Despite the names, shared is actually less secure than open. Because of this, our ...
1
vote
1answer
83 views

Padding of 802.11 packet with 0's in libpcap [closed]

I am trying to send probe request to Access Points.But whenever I send a probe request packet it is padded with 0's i.e I see two packets on wireshark for every packet I send : a non-padded packet and ...
4
votes
3answers
1k views

Enumerate the subdomains of a given domain - what's the point?

There're a number of security tools out there that enumerate the subdomains of a given domain. I wonder: What's the purpose of that in terms of security / hacking? Is there any way to do that other ...
0
votes
2answers
88 views

Client misunderstanding nmap [closed]

My client wants their public facing IP addresses to be secure, but thinks that running nmap port scans will draw attention from hackers. To settle this once and for all, what do you say?
22
votes
8answers
4k views

Is possible to get infected by only staying connected to the Internet (nothing else)?

I have a router and I'm the only user. I have a computer with Linux and a tablet with Windows 8.1. Because of a few problems, I had to reinstall Windows on the tablet. Since I'm a bit paranoid about ...
1
vote
2answers
106 views

Cheap and efficient strategy to protect against professional attack?

With things like NSA or state sponsored attack, it seems that no one is safe from a technical point of view. Is there any efficient method or strategy to protect against them? My guess is that ...