Questions tagged [lan]
The lan tag has no usage guidance.
23
questions
2
votes
1answer
87 views
End-2-End and server to server encryption over home network
I am setting up a private home management system containing several daemons/servers and a few clients to connect from.
I am trying to achieve end-to-end encryption with the most monitoring and health ...
2
votes
1answer
58 views
Considerations for securing a computer on an open LAN? [closed]
Im about to move to a serviced office where they have an open LAN. Eg. no VLANs for individual companies. The room itself is locked so the main treats would be from cyber security, rather than ...
1
vote
1answer
84 views
Local area network multi-device network communication protocol
I am planning to build a local area network that will have one Master device and multiple Slave devices. The communication should be able to handle only ON/OFF functionality of the devices (devices ...
2
votes
2answers
92 views
Is using a network sniffer for host discovery a viable option?
Would a packet sniffer like tcpdump be effective for network host discovery and if so how effective is it compared to more active methods such as the infamous network mapper nmap?
0
votes
0answers
413 views
Need to encrypt RTSP over LAN
I tried googling everywhere, but got no help with what I needed specifically.
Let's say I have several IP cameras on a local area network. This LAN will NOT be connected to the Internet. The IP ...
-2
votes
3answers
265 views
How can I stay anonymous in a LAN without Internet access?
I need to perform attacks (SQL injection) on a server. I thought of using a proxy to be anonymous, but the topology is a LAN without Internet access. I have no idea of the protocols used in the ...
2
votes
2answers
172 views
If two servers are in the same private network, is it better for them to talk to each other through HTTP or HTTPS?
Is anyone kind enough to tell me what actual companies do about the matter? This is assuming the company doesn't run the risk of having insiders sniffing the packets.
1
vote
0answers
67 views
Securing connections to a web server hosted on a LAN
I am hosting the same website in two locations:
A public location https://mysite.com (AWS hosted)
A location on a LAN with local DNS https://mysite.local.
mysite.com is a service which targets ...
2
votes
2answers
130 views
How safe is it to allow key-based SSH access within LAN?
So this is my setup:
We have a few machines in a LAN, used for computation, which me and my colleagues access from the outside with SSH.
All our accounts on the LAN machines are managed and shared ...
0
votes
1answer
117 views
Are Routers Liken to a Firewall? [closed]
When my ISP came to set up my fiber internet, I told the technician I didn't want a router included within my wired network. He successfully managed setting up the ONT(Optical Network Terminal) ...
2
votes
2answers
225 views
Threat of a Windows XP machine connected to a local network via WIFI (today in 2018)
After seeing this question I am wondering what could actually happen if a Windows XP machine was connected to a local network via WIFI. Imagine the machine will be used to browse the internet, read ...
3
votes
4answers
741 views
I started to learn about MITM attacks, and I can't figure out few things
I just started to learn about MITM attacks, and I can't figure out few things.
I have few questions and appreciate all the answers.
If the attacker is already in my LAN why does he need to trp to arp ...
0
votes
2answers
2k views
Why is NAT referred to as “the poor man's firewall”? [duplicate]
How exactly does NAT protect a network? How does it relate to a firewall?
-1
votes
1answer
716 views
Can an infected device within the LAN still be a threat if turned off?
Scenario
An attacker successfully infiltrates the LAN and infects a device that acts as a future bridge. Once inside, the infected device can communicate with a malicious source outside of the local ...
7
votes
1answer
862 views
Second router setup for secure subnet
I have a BT Smart Hub as my router which has no guest network functionality, I also have a Netgear Nighthawk D7000.
Initially I attempted to use only the D7000 and take advantage of the guest wifi ...
0
votes
1answer
85 views
E2E Encryption in a LAN
I'm looking to protect data in transit around the LAN from file servers both Linux and Windows based. I think the correct solution is IPSEC as I want a blanket solution for both types of operating ...
0
votes
1answer
44 views
Process of finding device hostnames on LAN
Is there a reliable way to retrieve hostnames from LAN devices without having to install extra software or performing nmap-style OS fingerprinting?
I'm ideally looking for either a protocol that has ...
1
vote
0answers
86 views
Spoofing an IP/MAC address to avoid ICMP Destination Unreachable being sent back [duplicate]
As far as I understand UDP flooding the idea is to send UDP packets across all ports from e.g. Alice to Bob, and get Bob's machine to check who listens to certain ports and generate many ICMP ...
1
vote
1answer
355 views
IP Address leak on LAN scan
I am using VPN and encrypting my web traffic through them. However, When I do Lan Scan I can see my real ip address. All other websites, IPleak.net, WebRTC leaks, DNS leak, Email Leak and IPv6 leak do ...
2
votes
4answers
5k views
How exactly do you protect against ARP spoofing in large LANs?
No matter how much I google I can't get a definitive answer.
Static ARP entries:
Static ARP addresses prevent only simple attacks and do not scale on a
large network, since the mapping has to ...
6
votes
1answer
8k views
Wireshark can't decrypt WPA2 LAN traffic
I want to decrypt my own network traffic.
I have Linux Mint on Samsung Laptop with a AR542x Wireless Network Adapter.
Open Wireshark, start capture in promiscuous mode & monitor mode and I ...
13
votes
1answer
3k views
IP address assignment for LAN
Does it make any difference from a security perspective to use any other IP address ranges than RFC1918 addresses within LAN segments?
2
votes
1answer
506 views
blackbox pentest newbie - find valid internal IP adress from unknown range
I`m a beginner and would like to know, how can you find a valid IP adress to start your scan, if all you have is the LAN cable....nothing more.
No DHCP is enabled.
Any hints or clues on how to figure ...
