Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

0
votes
3answers
15 views

How a professional hacker would penetrate a computer in a network?

Which kinds of vulnerabilities or security holes a hacker would use to penetrate and take over a computer in a network, like a normal PC in a default network (Wireless-LAN). I often hear that the ...
0
votes
1answer
30 views

How to sniff 802.11 packets without going into monitor mode?

Is it possible to sniff or capture 802.11 packets which sends my computer to the router (AP). I know that I can't sniff packets which have a other destination MAC address without going into monitor ...
0
votes
1answer
31 views

Hiding my activity from mobile service provider

Ok there is mobile service provider which also happens to be providing mobile internet. Now, I am interested to hide my activity from that provider. e.g. it can't see my browsing habbit. Basically ...
0
votes
0answers
15 views

rdp connection with netcat pivoting

I want to connection from local computer to another local computer. I have 3 machine. for example A: 192.168.1.50 -> in local windows machine B: 50.3.52.110 -> linux server C: 192.168.5.25 -&...
1
vote
1answer
17 views

wpa_passphrase command encrpyting psk

Does the wpa_passphrase command turn an ASCII string into hexadecimal and what is the benefit of doing so? Is the psk sent in the header of packets? Can it be easy to sniff if it's in a string format? ...
0
votes
3answers
416 views

What service could penetrate my Firewall via UDP on Port 17275?

Has anyone monitored various requests from all over the world on Port 17275 via UDP? My firewall logs show huge amounts of such requests from lots of different IP Adresses. I can't find any ...
-2
votes
0answers
36 views

How can one track the origin of an image shared in Whatsapp? [on hold]

How can one track the origin of an image shared in Whatsapp?
1
vote
2answers
67 views

What phases does a network penetration test consist of?

What are common phases of a network infrastructure penetration test? Staring with discovering IP's and ports? A simple vulnerability assessment, checking version information of banners from different ...
1
vote
4answers
13k views

Is there any solution for block the HTTPS traffic using URL filtering?

The URL filtering can block the HTTP traffic but not the HTTPS traffic in Internet Explorer. For example, the website http://www.facebook.com is blocked by the URL filtering while the https://www....
2
votes
3answers
3k views

What is same site scripting and what are some exploit scenarios?

I know it is an issue with how DNS is configured , but is it really dangerous if the attacker couldn't access your network?
-1
votes
0answers
30 views

Jump Servers for security [on hold]

1.what is the advantage of using Jump Servers for security reasons? 2.how I can use two-factor authentication with Jump Server? 3.why Jump Server need VM ?
5
votes
2answers
397 views

Is it possible to identify the source of message in whatsapp?

Is it possible to identify the real source of message in whatsapp? Scenario : Texting whatsapp message to a group,one of the group member forwards it to another and it goes on atlast one day it ...
4
votes
3answers
220 views

Can CloudFlare be DDoS-ed and issn't the actual DDoS mitigation limit, financial resources?

CloudFlare (known for fighting DDoS-attacks) is explaining quite a lot about DDoS on their website cloudflare.com/ddos. In an article named The DDoS That Almost Broke the Internet they write about a ...
0
votes
0answers
23 views

Authentication in WPA from a user's perspective

I have read several articles that discuss the differences between WEP and WPA but I haven't seen an answer to my question, which is : How is the authentication used in WPA different from that used ...
3
votes
4answers
29k views

How to know what others browse through the network?

My friend connected to WIFI and after 5 minutes he told me which sites I had actually been browsing, and who I chat with. My question is: how do I defend myself against this, and also how did he do ...
3
votes
0answers
39 views

Is filtering flash based on the mimetype enough to keep it out?

As flash is a real security mess I started blacklisting flash at our proxy by blocking any content with the mime type application/x-shockwave-flash which works pretty well as far as I can tell. The ...
3
votes
2answers
69 views

As an end user on a network, how can I avoid being MITM'd by an SSID-spoofing device?

I've been looking at SSID spoofing devices lately, including the Wi-Fi Pineapple and similar hardware. While these types of devices seem very useful to someone who's up to no good or working as a ...
0
votes
0answers
42 views

Is it possible to figure out a password to a router using an Android phone? [on hold]

I have heard that there is programs which cracks the password on wifi for you. Would it be possible to do this using a smartphone?I am not asking for a recommendation for an app, just asking if it ...
0
votes
3answers
92 views

Understanding a DMZ with multiple servers

I get the general principle of a DMZ i.e. place public facing servers in the DMZ to isolate and protect the corporate LAN. I have a web application which is to be public facing, this web app needs to ...
0
votes
2answers
87 views

What is the likelihood of a NAS getting hacked? [closed]

I'm looking at NAS (network attached storage) to use as one of several backup storage devices to store my data, since I cannot find a DAS (direct attached storage) with RAID functionality (all of the ...
0
votes
2answers
164 views

Is it possible to bypass sniffing when using port mirroring?

INTERNET <-A-> ROUTER <-B-> PC Let's theoretically think we mirror the port on a ROUTER to a file. So the full network traffic on it. Question: is it possible to still have ...
-6
votes
0answers
74 views

How can I identify a person accessing my computer? [on hold]

Activity on my computer last night when I was not home: Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: 7/16/2016 11:27:59 PM Event ID: 4672 Task ...
2
votes
2answers
48 views

Relaxed access to tcpdump

I'm looking to do some packet sniffing on a computer that I do not have privileged access on. I am considering asking the admins to allow users in a specific group access to tcpdump. Specifically, I ...
4
votes
4answers
69k views

IP address of an iPhone

Recently I logged on to my bank account via the Chase app on my iPhone. I received a message that another device was currently logged on to my account and "would I like to end the session"? Of course, ...
17
votes
4answers
20k views

With IPv6 do we need to use NAT any more?

I'm wondering how to use NAT with IPv6. Seems that you don't even need it any more. So what exactly is the concept behind firewall configurations in IPv6 environments?
28
votes
6answers
10k views

Is pinging a website essentially the same as visiting the website through a browser?

I was looking at the domain information of a website (poaulpos.net) on who.is that Chrome connects to whenever I visit a specific an old Tech Times article about Thunderstrike 2, a Mac firmware attack ...
71
votes
3answers
80k views

Is it a bad idea for a firewall to block ICMP?

This question was inspired by this answer which states in part: The generic firewall manifest file finishes off by dropping everything I didn't otherwise allow (besides ICMP. Don't turn off ICMP). ...
-1
votes
1answer
56 views

Using old router as wi-fi extender/extra security on shared network?

I just moved into a building with three apartments, all of which split an internet subscription. There is only one router, however, in one of the other apartments. For security/privacy purposes, I'd ...
4
votes
2answers
111 views

Set up a system to sandbox/capture outbound traffic from Windows PC?

Does anyone know of a program/system that is purpose built to allow you to sandbox/contain an outbound connection from a Windows PC? The aim being that you can analyse the data being sent via the ...
0
votes
0answers
42 views

Dealing with a home network virus [closed]

We just called IT support and they said we have a network virus and on our home network and any device connected to the wifi has also now been effected. They said we had to contract a professional to ...
1
vote
1answer
49 views

Shared folders in Windows to/from unsecured PC on the same network

I have a Windows 10 desktop computer which is my main device. It's password-protected and I'm not concerned about it being physically accessed by bad actors. I have a Windows 7 laptop with a fresh OS ...
4
votes
0answers
49 views

Identify malicous hosts in our network by sending valid domain credentials

We are currently whitelisting the hosts owned by our company on our Cisco switches to prevent private hosts in our network. This works pretty well but someone can still spoof the MAC address of his ...
3
votes
3answers
107 views

VPN server in a router [closed]

I am new to using and configuring VPNs. I was thinking of setting up my router as an OpenVPN server, but as I understand that is to connect form the outside to my network. However, I want a connection ...
-3
votes
0answers
18 views

How to extract gsm elements? [closed]

I want to extract "to know " MCC MNC LAC CID of a phone by a it's number or a fragment msg (url that extract it) And ill be thankfull
4
votes
1answer
261 views

Can the windows Remote Procedure Call subsystem be modified from the default without causing Windows 8/8.1/10 to break?

This is a question that personally as a security professional has bugged me for a long time. So, a default Windows installation, from XP up to 10, typically has a few services listening on the quad-...
23
votes
2answers
5k views

How can my IP camera be hacked behind a NAT?

I keep reading about hackers accessing laptop and home security camera systems. Most home users are using SOHO routers meaning they are on a private IP range behind a NAT. I realize NATs aren't ...
0
votes
1answer
74 views

What path (programming language, courses) should I take inorder to become a network/ security developer. (Not network configuration)? [closed]

I would want to work in network and network security field as a developer(programmer),developing network products(not network/network product configuration) ultimately to get into network security ...
34
votes
3answers
5k views

Do simple Linux servers really need a non-root user for security reasons?

Playing devil's advocate, Let's assume I purchase a Linux server from a hosting provider. I am given a password for the root user and am told I may login using SSH. The only purpose this server has ...
1
vote
1answer
555 views

Can you sniff broadband connections? And how you secure that?

I know that you can sniff data which is transferred over wifi. Can you do that with broadband (wired)? And how can you secure the network, so nobody could sniff data both over wifi, and broadband?
0
votes
2answers
58 views

See the traffic from my own Android phone

My employer (a Dutch university) gave me an Android phone. I am not allowed to root it. Still I want to know what traffic goes through it. Also I want to protect myself when I am in public places. ...
0
votes
2answers
101 views

How can I capture another IP's HTTP traffic with Wireshark network analyzer?

How can I capture another IP's HTTP(S) requests in a local network with Wireshark network analyzer? Is it possible?
1
vote
1answer
44 views

Is rootkit detection by comparison of file, process and connection lists a good practice?

I'm currently reading the Blue Team Handbook and one of the recommended methods to detect rootkits is to compare technical data obtained from various sources. As I understood it this is practiced like ...
1
vote
2answers
5k views

Is it dangerous to use hamachi for sharing game servers

I'm sure most of you are aware of a game called Minecraft. Well a lot of people like to host servers, however many are unable to port forward or pay for hosting so they download and use a piece of ...
0
votes
1answer
55 views

Following strategy using DDoS mitigation service - UDP bandwith exhaustion attack from spoofed IPs

I need to defend against receiving a massive spam of UDP packets from random spoofed IP addresses. I would make it this way: In my protocol, every UDP packet contains username and password. Firewall(...
0
votes
2answers
244 views

Kali Linux/Metasploit in VirtualBox - Issue with ports

I've been attempting to get port 4444 to open these past couple of days. I finally figured I'd try to get it working on my Windows machine first and I finally got it. Now, no matter what I do in the ...
0
votes
1answer
104 views

Detection of abnormal file access patterns

A company allows its developers access to snapshots of their entire codebase through a local network share. In order to perform their job, the developers compile code daily, where each compile reads a ...
0
votes
1answer
325 views

Could other people steal my Internet connection if they had my PPPoE data?

Would it be possible for other people to use my PPPoE data to get Internet access or is it somehow restricted to my house? Then what about my neighbors downstairs, could they do it? And what about ...
22
votes
2answers
862 views

Why on earth would anyone use the 'top secret' option of IPv4?

So, I was reading RFC 791, and got to the bit about options (here). Everything seemed to be decent and sensible, until I got to the 'levels of security' part. Now, I can understand how, internally, ...
42
votes
5answers
44k views

Should SSL be terminated at a load balancer?

When hosting a cluster of web application servers it’s common to have a reverse proxy (HAProxy, Nginx, F5, etc.) in between the cluster and the public internet to load balance traffic among app ...
1
vote
3answers
57 views

When is IP blocking OSI level 7 only and what is the purpose of doing so on multiple locations?

Let's say there is an application that has IP whitelisting, all other IP's are denied. This check takes place on three different locations: iptables, .htaccess, PHP script. Now in what OSI layers ...