Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

4
votes
2answers
144 views

Is it possible to ping a LAN card through its MAC address?

As you can start a PC through its 'WAKE ON LAN' feature on private networks, can you trace someone's online status through their MAC address over the internet ?
1
vote
1answer
75 views

IT support and security concerns regarding local VM's

I started working at a large financial institution several weeks ago as a software engineer and despite every other aspect of this job being great, I am haunted by the constant restrictions that ...
0
votes
0answers
24 views

Outbound Traffic Blocked? [on hold]

I'm kind of new to networking. I'm working at a business that has solar panels installed on the roof. Recently, the solar reader has been unable to send data out on the network. There's a router ...
0
votes
2answers
68 views

need network level security alternatives to a VPN

We have a set of servers hosted at a tier-1 provider, and they are currently behind a VPN running on a gateway machine and not accessible to the open internet. Due to VPN instability issues we've ...
2
votes
3answers
92 views

How does Network Discovery OFF protect my computer?

Yes, it seems that the computer will not respond to pinging. But any computer with a packet sniffer will be able to see my ip once I send any packet to the router. So basically, if I'm surfing the ...
1
vote
4answers
127 views

Are computers on same network as honeypot safe?

Wanted to if a computer is setup as a honeypot and is on the same LAN with other computers, could these other computers be attacked? My thought is that if an attacker infects a honeypot with a worm, ...
2
votes
1answer
171 views

Indirectly relaying intranet server to outside world

I have an internal network of IP network cameras. The feeds from these cameras are ingested by a single server and presented from a unified web interface both internally and to the outside world (both ...
1
vote
2answers
352 views

arp request to a ghost host

All the clients in my wireless network send continuously arp requests to a host that doesn't exist (I've checked its absence with nmap -PN [IP]). The clients use windows 7 and windows xp (here the ...
0
votes
0answers
24 views

What Does Putting Each Subscriber of ISP in One Subnet of His Own Mean?

I've noticed that I used to be assigned an external IPv4 from my ISP and a 24 bit mask (255.255.255.0), then it changed to 255.255.255.255, today I was studying IPv4 subnetting and I understand that ...
1
vote
1answer
127 views

How can I trace a user on my network?

I want to trace a user based on IP Address (or MAC Address) on a Network with about 10 L2 or L3 Switches. Is it possible to know that on exactly which switch and on which port a user with a specific ...
2
votes
1answer
52 views

When does one require netbios?

I've heard others talk of disabling netbios, but over the years I have never understood exactly when this protocol is required. The wikipedia page explains very abstractly what it is, but not which ...
19
votes
3answers
7k views

What benefits does Nessus have over OpenVAS?

Nessus and OpenVAS appear to have fairly similar features. Why would you choose one over the other, besides the benefit of commercial support (which isn't available for Nessus Home Feed users ...
1
vote
1answer
107 views

How do you stop a hacker with no IP and a dot for their HOST

The entry below is from the visitors log in c-panel Host: . /specific legimate-wordpress-post/ Http Code: 503 Date: Jul 24 09:28:06 Http Version: HTTP/1.1 Size in Bytes: 1118 Referer: ...
4
votes
2answers
418 views

3G Femtocell at home: can anybody connect, and is all traffic encrypted?

At our office we have bad reception for 3G. We bought a Femtocell device that provides a 3G connection for one specific mobile provider. This device is connected to our network via ethernet. I cannot ...
0
votes
1answer
61 views

what type of attack does LOIC do? [closed]

I have used LOIC (Low Orbit Ion Cannon) earlier . Today i was reading on wikipedia that there are many types of dos attacks , namely SYN attacks , HTTP flooding ,UDP flooding ,etc and two questions ...
5
votes
3answers
198 views

Is it a bad idea to share the ssh host key in a diskless environment?

I am looking at this cluster of student work stations. They are diskless clients which boot from NFS. They also have sshd enabled. All of these machines share the same ssh host key (rsa,dsa,etc), ...
0
votes
0answers
11 views

Airmon-ng, airbase-ng and interface names [closed]

I recently found a tutorial on how to set up a rogue AP using airmon and airbase and have a couple questions regarding the interface naming conventions. We start off with my wireless interface which ...
1
vote
1answer
88 views

How common are mitm attacks behind an ISP?

Yes. Of course using https everywhere is best. But sometimes that's not an option. In those cases, I'd like to make an informed decision. Is there any information about their prevalence? Or would that ...
2
votes
2answers
84 views

Get the browser history without using a browser

I would like to get the browsing history of a computer in my network (without running that web browser), is it possible?
-1
votes
2answers
47 views

blocking of a sites on Windows

I would like to block websites like Facebook, YouTube and other social sites as part of my job and would need your advice on how to manage that. There are about 120 PCs in the building. Is something ...
5
votes
3answers
3k views

Resolving an IP address of a Remote machine to its MAC address

I wanted to know whether its possible to get the MAC address of remote node (computer/Access Point) if I know its IP address. I have heard that if someone sends you an email (even through gmail), you ...
-1
votes
0answers
10 views

Grep a destination IP in Netstat results in realtime - windows 7 [migrated]

Does anyone know how to get grep working so you can tail netstat results in windows 7 CMD?
0
votes
1answer
33 views

Designing and implementing a secure epayments system with RESTful API

I want to design and implement an epayments system (I will not be handling credit card payments). The system will have a RESTful API. I am already familiar with RESTful servies, and have built a few ...
0
votes
1answer
50 views

Pivoting without meterpreter [closed]

Is there any way other than Meterpreter to pivot into the network? If yes, then please guide. I already know about Meterpreter, just want to know manual methods other than this.
0
votes
1answer
99 views

Router level filtering on home network [closed]

I want to block some part of a website or some videos from dailymotion or other site video sites. Type of network I have 7-8 devices(PCs, Mobiles, iPhones & tablets) all connected to a router ...
4
votes
1answer
240 views

HeartBleed and Closed Source Hardware like Cisco

With the release of heartbleed how does one protect themselves with closed source networking hardware like cisco? Especially hardware with VPN variety. Would it be best to replaced such systems with ...
1
vote
1answer
108 views

De-auth attack Reason codes and possible reaction

I am learning about Deauth attacks and how they work. I see that the Deauth frame has a reason code which indicates the reason for the deauth. I have tested the attack with aircrack-ng and this reason ...
-2
votes
1answer
80 views

good books for learning network and web security? [closed]

I am reading "Hacking The Art of Exploitation" book . i have read till chapter 2 programming but most of it has gone above my head . I want to learn basically cryptography , network security and web ...
3
votes
1answer
5k views

House owner can see who's connected to WiFi; what more can he see?

I live in a rental house, and use the house-owner's wireless network to connect to the internet. The owner can see who is connected to his wireless network and I had a few questions regarding this ...
1
vote
1answer
65 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
7
votes
2answers
216 views

How serious is a local virus in terms of network security

My colleague got a notification on his machine of a possible virus (through the virus scanner that is installed by default on all machines). He called up the tech department, and they simply told him ...
1
vote
1answer
63 views

What is the point of hosting database externally?

Following the breach of avast:forum.avast.com they decided to host the database externally@id.avast.com. My question is, what is the point of hosting the database externally since when you get remote ...
0
votes
2answers
290 views

What service could penetrate my Firewall via UDP on Port 17275?

Has anyone monitored various requests from all over the world on Port 17275 via UDP? My firewall logs show huge amounts of such requests from lots of different IP Adresses. I can't find any ...
0
votes
1answer
5k views

How much can someone see from my iPhone by connecting to my wifi

How much can someone see from my iPhone by connecting to my wifi and can they copy my messages files documents etc
2
votes
2answers
122 views

How to build a secure affiliate network

I'm going to build a demo affiliate network, which needs to be secured. Let say I have a web application called Affiliate Network Manager that manages all affiliates associated with my online book ...
0
votes
1answer
50 views

is UPnP / NAT-PMP really necessary today?

The possibility to enable port forwards for any hosts inside the LAN has of course security implications. The problem from my point of view is not that there are bad users, but bad hosts/programs and ...
4
votes
6answers
8k views

Using Python for security

I love using Python for the scripts I need and for work. But I really want to learn Python for network security since I will start a NS course next year. My question would be how would it be the best ...
0
votes
1answer
83 views

Should remote access (RDP/SSH) only be allowed for VPN clients? Or should RDP and SSH be opened the public?

I am about to push hard against the powers that be and strongly recommend that we shift our many (20+) consultants from direct public access to RDP & SSH to VPN clients (connecting to a ...
0
votes
1answer
37 views

Implementing MITM attack on MAN or WAN

Is it possible to implement MITM attack on larger networks than LAN? For example is is possible to implement such an attack on the whole network of an ISP?
1
vote
0answers
18 views

Should my server ever need to directly communicate with the NAT gateway? [migrated]

What I mean by ``directly communicate'' Does it ever need to receive packets with the gateway's IP address as the source IP address, or send packets with the gateway's IP address as the destination ...
1
vote
4answers
246 views

How to monitor my home network traffic?

I have an ATT U-Verse Wireless router supplying 5 computers throughout my home. It is hardwired to my main computer. I have three children of all ages, one of which has had a tendency to make poor ...
0
votes
1answer
92 views

Is a firewall an access control list?

I want to know if a firewall is considered an access control list (ACL). I know there are other types of ACLs, but am specifically interested in knowing if a firewall is an ACL. Edit: It appears ...
0
votes
1answer
96 views

Firewall hole punching [closed]

I'm interested in doing my thesis on Firewall hole punching. Hole Punching: A way to exploit NAT to open a connection TCP or UDP between a Client and a Server. What I'm looking for is a reason this ...
2
votes
1answer
182 views

Can I perform WEP cracking from several laptops against 1 AP

I have successfully being able to perform WEP key cracking attack using aircrack tool. I want to allow my students to test this in a lab environment. They will be working fro their own laptops against ...
-1
votes
3answers
404 views

How to Block a url not a website [closed]

I want to block a single url. I am using OpenDNS now and it is working fine with website blocking on my network but the problem is that i want to block a url like ...
1
vote
4answers
102 views

untangle server at work place privacy

When I am browsing in an environment where Untangle server is installed, can the network admin track everything I do? for example: Skype chat messages Personal emails (Gmail, Yahoo)
0
votes
1answer
53 views

What does this Snort rule do? [closed]

Rule-4: alert udp $EXTERNAL_NET any -> $HOME_NET 3333 (msg:"ET EXPLOIT Wireshark ENTTEC DMX Data Processing Code Execution Attempt 1"; content:"|45 53 44 44|"; depth:4; content:"|04|"; ...
18
votes
3answers
2k views

Are popular porn sites more likely to be infected with malware?

I'm trying to help my friend understand this because he believes that since a site is very popular, that it's less likely to infect its viewers because of its security! Is a popular site less likely ...
7
votes
3answers
3k views

Private Tor networks: what are the benefits, and how would it be accomplished?

What are the benefits of someone building a private Tor network? ...One that is disconnected from the well-known network being used on the Internet at-large. My intent is to make Tor more ...
1
vote
2answers
133 views

Hundreds of legitimate IPs are hitting my website like bots [closed]

I'm having a huge problem with my website due to a weird spike on hits. Today, i'm getting several hundred hits. Normally, i get a lot less, and they are from me country. Today's hits are from every ...