Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

0
votes
2answers
137 views

Identifying the correct ssid

Suppose a wifi network is present with a given ssid.Now I create a hotspot with the same ssid as that of the original network.If a user tries to connect to the wifi , which one will he connect to?Also ...
5
votes
1answer
133 views

Ideas on how I can fragment captured network traffic?

I am trying to create a lab environment where I can analyze common IDS solutions (starting with Snort specifically) and their ability to reassemble fragmented IP trains. I have a collection of ...
4
votes
1answer
209 views

Is it possible to sniff traffic of a remote network? (With admin access to router)

Me and a friend of mine are simulating a widespread scenario where router configurations are untouched (default passwords) and are visible from the internet. Him, acting as the victim, will constantly ...
3
votes
1answer
148 views

How to sniff [possibly encrypted] TDS protocol data from the host the client application is installed on?

Let's say, there is an .NET application on a windows 7 host where I have administrator's access rights. The application works with remote MS-SQL server which I don't control, it also seems that the ...
2
votes
1answer
287 views

Snort even though working properly does not report majority of rules

I have installed Snort 2.9.7.0 and it does not detect majority of attacks, such as nmap port scans, downloading exe files, opening documents containing keyword "root". I use Snort together with ...
2
votes
1answer
112 views

User Binding Request with credentials in Lync Dump

I've dumped a call between two lync clients and saw that there were some UDP packets that look like this: Server -> Client 1132 14.495362000 <serverip> <clientip> STUN 146 ...
1
vote
1answer
69 views

Automating NIKTO scanner

I am working on NIKTO automation. I have a text file contains list of IP addresses along with their ports open. I have already made nikto script. Script functionality - it takes IP addresses and then ...
1
vote
1answer
50 views

Unidentified Filemount in Ubuntu

Not sure if this should go under security or Ubuntu but, I believe that my server got hacked somehow. Its being hosted on Digital Ocean and I mainly use it fiddle around with things. Today, I got a ...
1
vote
1answer
100 views

running botnet for analysis

I a very curious to understand botnets practically. I want to run a p2p botnet (storm or waledac) for analysis and learning. I have mainly two issues: Where can i get access to binaries of either ...
1
vote
1answer
105 views

Segregating a Printer in my Enterprise Network

I have a EAP-TLS network at home which I've managed for some time now. I just got a new Brother HL-5470 printer so I can finally print things at home, which is really nice. The only problem is that ...
1
vote
1answer
204 views

WLCTL protocol detected by sniffer in an Android tablet

I detected that my rooted Android tablet had a slow connection. Trying to find what is taking the bandwith, I installed a firewall (DroidWall) and I blocked all the applications thinking that one of ...
1
vote
1answer
393 views

802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)

So I have read that 802.11 standard requires stations and APs to go through the authentication and association before communication can take place. I also know that WPA/WPA2 has its own authentication ...
1
vote
1answer
157 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
0
votes
1answer
43 views

How does Facebook really identify requests?

Today I have discovered something very strange. It seems like Facebook is playing some kind of unfair game for identifying one's online identity. So, here is what I have done: I have a regular ...
0
votes
1answer
33 views

Unsecured Guest access on Macbook Pro

I am concerned that my personal, home based Macbook Pro guest network access may be being used by an outside source. Is there a way for me to identify user access, time logged in / out, etc?
0
votes
1answer
112 views

Designing and implementing a secure epayments system with RESTful API

I want to design and implement an epayments system (I will not be handling credit card payments). The system will have a RESTful API. I am already familiar with RESTful servies, and have built a few ...
11
votes
0answers
296 views

WPA2 ephemeral key derivation

I'm trying to learn how ephemeral keys in WPA2 4-way handshake are derived. Starting from 4 EAPOL packets sniffing, I successfully derived PMK and PTK reading ANonce, SNonce, and knowing ASCII-PSK ...
2
votes
0answers
37 views

please give me an specific example about “a lattice model of secure information flow”?

Currently I read the paper "A lattice model of secure information flow", but I think this paper is so abstract. Could you please give me an specific example and describe what the secure information ...
2
votes
0answers
60 views

How to design a right VPN connection for an organisation (Interconnected MPLS link or Individual FW)

Thanks in advance for your advice We have to implement VPN connection for nearly 7 countries Option 1 : As we have private MPLS link to all 7 countries. It is been outsourced Third party. They ...
2
votes
0answers
134 views

Performing an airport scan on my Mac for available WiFi networks pulls up multiple SSID with different mac address. What's going on?

I performed the following command to search for available WiFi networks in my apartment complex: /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport scan | grep OBC I ...
2
votes
0answers
134 views

Is the GTK or MIC in the unencrypted portion of a WPA protected frame?

In order to decrypt traffic you must have all 4 portions of the WPA Handshake. In WPA protected data frames, is there an unencrypted portion of that frame that has some sort of identifiable value to ...
2
votes
0answers
95 views

Distinct databases with the same Kerberos Authentication server

Should two deployed applications within a private network requiring distinct databases (for storing their own users credentials) require distinct Authentication servers (implementing Kerberos)? Or is ...
1
vote
0answers
61 views

Web/search engine spider on local network?

I was setting up a test webserver on my local network earlier, and whilst sorting out the firewall I noticed the following in the log (/var/log/ufw.log - I'm using UFW on Ubuntu 14.04): Jul 9 ...
1
vote
0answers
22 views

Migration from TDM to All IP: any security issues?

My phone operator is slowly abandoning TDM (Time Division Multiplexing) to replace it with IP connections. What are the security risked related to this change? will all the phone line be like in a big ...
1
vote
0answers
71 views

Host-based security architecture for web server network

I am begining with network security and after studying for a while about often used technologies I got to this architecture for my home server (sorry it is not in english). I considered 3 basic ...
1
vote
0answers
66 views

ARP poisoning question

I'm writing a program that detects ARP poiosoning. My question is: How can I b sure my LAN hasn't been poisoned? Yes, I can use my settings and find the IP address of the default gateway and yes I ...
1
vote
0answers
53 views

Is a direct SIP video call (encrypted) between two computers more secure than going through a registrar service?

I learned recently about ZRTP-encrypted video calls using an SIP client, such as Jitsi or Linphone or Blink. I was able to make a direct encrypted video call between two clients on the same local ...
1
vote
0answers
81 views

How can I launch DHCP starvation attack in WLAN?

In WLAN, due to MAC association on Access Point (AP), I can't send the DHCPDISCOVER messages using random MAC addresses. But if I keep my original MAC address as the source ethernet MAC a and random ...
1
vote
0answers
86 views

Why would home routers accept incoming DNS traffic?

I stumbled upon an interesting paper (PDF Link) where researchers found out that more than 58% of the DNS open resolvers that are blamed in DDoS attacks are in fact home routers distributed by ISPs to ...
1
vote
0answers
88 views

Traffic anonymization through routing - software and algorithms

I stumbled upon an interview with "the grugq" in which he is talking about how hackers anonymize their traffic, i.e. hide their original ip address (- this is also what I will mean by "anonymizing" in ...
1
vote
0answers
51 views

Key Distribution using multicast

I am trying to come up with a solution for a system where i need to generate a key (Kn) from time to time and distribute it to a large number of servers in a private network. Since it has to be a ...
1
vote
0answers
190 views

Security risk of connecting one mobile device to another mobile device's hotspot

Is there any risk when connecting an Android Phone to a [Verizon] iPhone's Hotspot? If there are I'd like to know about solutions. The Android Phone will basically be tapping the data plan of the ...
1
vote
0answers
70 views

Local lan drive by download

Basically, I'm testing a local network, on which I'm able to use ARP spoofing. I now want to try and infect one of the Windows boxes on the network with a backdoor. I could inject an iframe into their ...
1
vote
0answers
67 views

Multiple Independent level of security vs Multi-level security

I am looking for a way to isolate two different networks from each other. Suppose we have 2 different network (public and private). I am looking for a way to connect to these two network via single ...
1
vote
0answers
392 views

Proxy via pfSense and exclusions for DNS

I have posted this to NetworkEngineering.SE, as that seems the more suitable audience for this question. I will leave this question open here but am happy to see it closed. I just did not want to ...
1
vote
0answers
208 views

Disable HNAP on D-Link router

I'm concerned that Home Network Administration Protocol (HNAP) is a serious vulnerability that exposes consumer network routers to remote management by malicious entities such as government ...
0
votes
0answers
27 views

SDN Security - why not attack the controller itself?

I have been looking into SDN (Software Defined Networking) and one advantage of using this is to be able to redirect traffic to stop DDoS attacks. The traffic is ultimately thrown away. My question ...
0
votes
0answers
82 views

How 'private' is my setup?

I'm currently running QubesOS (so essentially a virtualized Fedora operating system), which I use to access an offshore VPS through I2P (using garliccat). I then route all my traffic through the VPS ...
0
votes
0answers
47 views

Alternative to ECC for mobile security

I asked a question a couple of months back, which led me to ECC. The following question is in continuation: Current Setup: I've two devices A and B which need to interact with each other securely ...
0
votes
0answers
74 views

Could other people steal my Internet connection if they had my PPPoE data?

Would it be possible for other people to use my PPPoE data to get Internet access or is it somehow restricted to my house? Then what about my neighbors downstairs, could they do it? And what about ...
0
votes
0answers
102 views

Should I use a VM firewall or not?

I am managing a couple of VPS-es on an old platform I would like to no longer maintain. We used a widely used commercial VPS control panel to create the VPS-es in question. The customers may ...
0
votes
0answers
41 views

How do TSC (TKIP sequence counter) calculate into WPA?

I'm reading about 802.11, from IEEE's pdf (IEE pdf), from page 1191, and in particularly I'm reading about TKIP. And to decrypt and to encrypt used a TSC (TKIP Sequence Counter) as you can see in ...
0
votes
0answers
39 views

Does NDP (Neighbor Discovery Protocol) reduce ARP (Address Resolution Protocol) attacks?

I read the comparison of NDP with ARP but am uncertain if NDP does reduce any amounts of ARP attacks, given that with NDP, ARP is not used for address resolution. For the discussion to be specific, ...
0
votes
0answers
69 views

Is WPA practically less secure than WPA2 only if QoS is enabled?

I've been looking into attacks that are effective against WPA-TKIP but not WPA2-AES (both using PSK). I've found Vanhoef & Piessens's paper that builds off an attack by Beck & Tews and can be ...
0
votes
0answers
30 views

Using Team Foundation Server for Classified Projects

I work in a secure area on programs in which large portions of the code are federal government classified secret. We use Visual Studio so I would like to be able to use TFS for versioning control ...
0
votes
0answers
148 views

Tunneling Remote Desktop from DMZ Windows server to my Listening Linux Server. How to?

I have a situation in a penetration test where I got a meterpreter on an internal (DMZ) Windows box, and I want to connect via RDP to it, however the RDP port is blocked externally. The box I hacked ...