Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

0
votes
3answers
39 views

Anonymity through Tor over VPN

I want to do some research on network anonymity. Assume that I am careful enough not to disclose any personal information while connected to an anonymous network. If I run a system that uses TOR ...
1
vote
2answers
74 views

Nmap scan list of domains and provide boolean if up/down

I have a newline separated list of domains that I would like to perform an arbitrary nmap scan on (e.g. aggressive, syn) and I would like to output a boolean that indicates whether or not any ports ...
1
vote
1answer
41 views

Communication between two open endpoints, is this secure enough?

I'm building a (very simple) tool to communicate between two servers. I started by asking if there was a better alternative than making a home made scripts and we came to the conclusion that for ...
3
votes
1answer
58 views

If I connect to VPN through proxy, who can see what?

I try to understand what happens when I use an HTTP(S) proxy in my OpenVPN client configuration. What's the advantage of an HTTPS proxy over plain HTTP? In any case the encryption takes place on the ...
-1
votes
2answers
82 views

Is it dangerous to use hamachi

In the Minecraft community people are firing up hamachi with Minecraft servers, but over all is a public hamachi dangerous for the host and all the users using it?
1
vote
2answers
52 views

Facebook security

I check my security settings (from my Facebook acc.) from time to time, and sometimes I see there are IP addresses which logged into my account but don't belong to me. When I look in the web who is ...
0
votes
2answers
114 views

Fake phone call

I have a problem, getting call from known numbers and when he lifts it, no one is speaking from other side! Well, the awkward part is, the call is from known numbers only, but if I ask the person ...
-1
votes
0answers
86 views

Can I used the command line to disable settings in Yosemite that have made my Mac visible? [migrated]

Recent changes to my machine as the result of an upgrade to Yosemite (OS X 10.10) have made my machine visible on Bluetooth and Bonjour, where it was not visible before. Is there a command line way ...
0
votes
0answers
11 views

logging of data traffic to follow cyber law [migrated]

I have connected my ubuntu 14.04 computer to a "mirrored" port on my firewall, so that I can see all traffic on the network. I use this today to see who uses our bandwidth with NTOPNG. but since I ...
24
votes
9answers
50k views

How secure is TeamViewer for simple remote support?

I'm deploying a web-based ERP system for a customer, such that both the server and the client machines will be inside the customer's intranet. I was advised in another question not to use TeamViewer ...
20
votes
7answers
1k views

Securing the security guy's home office: what should we do?

I read an article in the latest InfoSecurity magazine (an infosec trade rag by Elsevier) saying that us security professionals aren't necessarily taking the correct steps to protect our own home ...
0
votes
2answers
89 views

Advice - When just starting your career, what are the best certifications to eyeball? [on hold]

Im just starting out in school to study Network and Info Security. I know this is the field I want to invest my time and study into. Well over 200k security jobs went unfulfilled last year. My ...
1
vote
3answers
215 views

Malware stole an executable file on my computer? Seems unlikely

If you don't want to read all of the details, skip to the bottom; I'll make a summary. I created a computer program as a proof of concept (I threw it together in 12 hours, so I wrote it in Visual ...
1
vote
1answer
88 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
0
votes
1answer
142 views

My computer hacked? tcpdump show a connection to an ALLOCATED UNSPECIFIED ip address

13:06:05.345111 IP 192.168.1.101.36218 > 157.55.130.174.40033: Flags [.], ack 162, win 237, options [nop,nop,TS val 688796 ecr 596714815], length 0 This IP address is Allocated Unspecified on ...
10
votes
3answers
10k views

How to best set up public WiFi without giving access to the rest of my network?

For reference, this is just for my home network. Anyway, I have quite a few of my neighbors ask me to share my internet with them. I'd really like to eliminate this "here's the password" portion ...
5
votes
3answers
4k views

Detecting(and locating) rogue DHCP server on a local area network

How would we detect and locate a rogue DHCP server on our local area network?
3
votes
0answers
57 views

Is it possible to retrieve SSH v2 credentials in a username/password authentication scheme?

I'm currently analysing a compromised network(root access has been gained to a workstation and logs show that it has been used for port scanning and service brute forcing attacks on the remaining ...
2
votes
3answers
214 views

Understanding the security of my home network

With so many devices that have internet connectivity, I really want to put something in place that can alert me if any application or device is communicating insecurely. How would I use something like ...
3
votes
1answer
141 views

Closely spaced failed logins in auth.log

I have a raspberry-pi (running GNU/Linux) and I recently allowed my router to forward port 22 (ssh) to the raspberry-pi so that I could log in while away from home. I then noticed a bunch of ...
0
votes
0answers
55 views

Logging network traffic [migrated]

Don't know if this is right forum, so please excuse me for that. I have created a web service in ColdFusion and other application from outside the network is trying to access it via SOAP request ...
21
votes
6answers
1k views

How to secure a WiFi network?

What do I have to do to secure a WiFi network? Is there any best practices? I have been recommended to use WPA2 encryption on the router, is that enough? What can I do to improve the security even ...
2
votes
1answer
251 views

Can I perform WEP cracking from several laptops against 1 AP

I have successfully being able to perform WEP key cracking attack using aircrack tool. I want to allow my students to test this in a lab environment. They will be working fro their own laptops against ...
-1
votes
1answer
61 views

Shellshock vulnerability for pc inside LAN

A common pc running bash inside a home LAN network (with a router/gateway providing internet access to the LAN) does not have any contact with the external internet, except browser navigation and the ...
2
votes
1answer
146 views

DNS packets during ARP poisoning

I carried out an arp poisoning attack from my virtual machine to real machine with cain and able and collected data with wireshark from real machine. While I was investigating data with wireshark I ...
-1
votes
1answer
39 views

How strong exactly is a 3gbps booter?

I heard some people talking about how they had a 3 gigabyte per second drddosser. That sounds all fine and dandy, but what can that actually do? Could it take down a website? To what extent?
2
votes
4answers
28k views

How to bypass restrictive mac address filtering on home network (not malicious)

Background A short sketch of my situation before I formulate my question: I am on a large home network, which is privately administered by a couple of admins. The network consists of a lan and a ...
0
votes
1answer
123 views

Installed some software over a public insecure wireless network — should I consider myself compromised?

A couple months earlier, I made the mistake of downloading some software over an insecure wireless network and running it without checking its integrity. I am now considering reinstalling my system, ...
2
votes
1answer
84 views

How secure is WiFi roaming if clients connect automatically to access points with the same SSID and security?

After reading a bit about WiFi roaming where multiple access points are set up with the same SSID and WPA/WPA2 shared key, I'm wondering how secure the concept of WiFi roaming is. If clients connect ...
1
vote
1answer
68 views

How can we represent SSL and Firewall in OSI Model? [closed]

I want to draw an architecture diagram for a general ERP application. In that I have come across a confusing point: where should I place the SSL and Firewall? I tried to figure out exactly where ...
1
vote
0answers
53 views

How to retrieve type of device starting from its public ip

Given a public ip, is there a way to retrieve what's lying behind? I mean if I use nmap -PO 159.149.xx.xxx I am able to know if the device is alive (responding to ping) and which ports are open. But ...
2
votes
2answers
120 views

Computer's IP address used by another in closed network?

I got an alert in the newest OSX (newest Macbook Air) and in Eduroam network that my IP address is used by another machine. This is my first time in life. I think I may have been attacked because I ...
5
votes
1answer
622 views

What are the vulnerabilities of VOIP-specific security protocols?

Existing relevant questions: How do you Secure VOIP in a large organization What are the main issues and best practice security controls when exposing SIP and H.323 to the Internet? Do secure phone ...
32
votes
4answers
5k views

Why does malware periodically check google.com

I'm looking at some malware PCAPs, e.g. http://malware-traffic-analysis.net/2014/05/27/index.html . One of the things I've been seeing frequently is requests to alexa top million sites (e.g. yandex, ...
-1
votes
0answers
20 views

Which Industry verticals have made compliance under the Payment Card Industry Data Security Standard (PCI DSS) mandatory?

I know that a wide range of industries across different vertical markets are required to comply with the Payment Card Industry Data Security Standard (PCI DSS). Can you please state which Industry ...
1
vote
1answer
22 views

How can I implement a whitelist based on packet content?

At the moment I am looking for some way on Linux to have packetfilter whitelisting done but based on finegrained parameters such as packet content rather than more general parameters such as protocol ...
0
votes
0answers
8 views

Does 802.1X Multiple Hosts mode only work for access points or even through another switch? [migrated]

802.1X Multiple Hosts mode is usually used when an access point acts as a supplicant and authenticates to the switch, then allows further hosts by bridging it to the wireless network. My question is ...
2
votes
1answer
208 views

Indirectly relaying intranet server to outside world

I have an internal network of IP network cameras. The feeds from these cameras are ingested by a single server and presented from a unified web interface both internally and to the outside world (both ...
0
votes
0answers
26 views

Using Team Foundation Server for Classified Projects

I work in a secure area on programs in which large portions of the code are federal government classified secret. We use Visual Studio so I would like to be able to use TFS for versioning control ...
0
votes
0answers
33 views

Tunneling Remote Desktop from DMZ Windows server to my Listening Linux Server. How to?

I have a situation in a penetration test where I got a meterpreter on an internal (DMZ) Windows box, and I want to connect via RDP to it, however the RDP port is blocked externally. The box I hacked ...
4
votes
4answers
603 views

Server situated on two physical networks - Bad idea or not

The run down: Windows Server A (from here on referred to as 'the server') exists on the corporate network (ref as Corporate). A separate physical network exists for the Telecommunications Department ...
-4
votes
1answer
42 views

What are lawful network interception tools? [closed]

I am looking for network interception tools, which involves sniffing external networks... this is regards to a forensic project.. Any help would be appreciated!
1
vote
1answer
83 views

Worst-case scenario OPEN URL REDIRECTION and why google not covering it in bug bounty

OPEN URL REDIRECTION as per in my opinion can be proved very dangerous by crafting attacks such as phishing. But it seems like google thinks it as a very low level bug and does not provide any ...
2
votes
0answers
34 views

Removing malware which is creating temp file and modifying network traffic [duplicate]

I am on OSX 10.9.2, please note I have included several URLs in my post, this is not spam this is due to the nature of the malware. I have just discovered I have malware on my computer after noticing ...
9
votes
5answers
13k views

Can Skype chat be protected from snooping? Are there safe alternatives?

I use Skype a lot. With all of my clients, staff, contractors and friends, however, the acquisition by Microsoft worries me, as two of my clients are direct MS competitors, and I often work on long ...
6
votes
4answers
125 views

Does a separate internet connection increase security for remote users?

Our network admin has requested that a single remote employee purchase a separate modem in their house for "work" traffic. I question if this is a legitimate security practice of any kind especially ...
2
votes
1answer
186 views

De-auth attack Reason codes and possible reaction

I am learning about Deauth attacks and how they work. I see that the Deauth frame has a reason code which indicates the reason for the deauth. I have tested the attack with aircrack-ng and this reason ...
2
votes
1answer
48 views

Should reverse connections be used to bypass NATs?

I'm planning on doing a demonstration on how remote administrative tools work for my schools computer security club. I plan on writing a RAT in C++ and demonstrating/explaining how it works. I ran ...
1
vote
1answer
112 views

Extremely suspicious UDP network traffic when idle [closed]

My computer has been using about 7Mbps when idle, it does the same thing even I am playing games and such. This is the Wireshark capture ...
-3
votes
1answer
131 views

Download Torrents on University network without detection [closed]

I am wanting to download some things using Bittorrent, but I have heard that they can detect when someone is downloading torrents. How can they detect this? And are there any precautions I can do to ...