Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

0
votes
1answer
26 views

Block external http calls

I want to run many snippets of untrusted and unknown code on an Ubuntu machine hosted on Digital Ocean. For safety reasons, I would like to record and block any external calls made by any of the code ...
0
votes
1answer
113 views

How dangerous is this Network?

Our school requires everyone to bring their own laptops for homework, etc. It uses something called 'Genian NAC' to authenticate users. I can either use Ethernet or Wi-Fi to connect, but both require ...
1
vote
1answer
66 views

PC Isolation on network

I believe I have my answer but I just want to be sure. Basically I repair computers, most of unknown origins. Of course some could have viruses and such so I was wondering what the most efficient way ...
1
vote
3answers
66 views

How useful is it to prevent Linux applications from setting up any untrusted connections, and can it be done easily?

Threat: your Linux machine gets compromised in some way (untrusted app, or compromised install package or update, or an app is compromised because of a vulnerability, etc.) and something on your ...
0
votes
2answers
39 views

Can a static IP address be a trusted user identifier in a secure environment?

Would it be an acceptable practice, if we were to register a client (individual or company) by associating them with their static IP address to perform some secure action that only authorized clients ...
0
votes
2answers
98 views

Have firewall and VPN already, should I buy a mini router to protect my laptop?

I often travel for business and use hotel wifi. I have installed Little Snitch and VPN-Outline for internet security. Should I buy a mini router? Will it keep my computer safer? Otherwise,with or ...
0
votes
3answers
74 views

In ARP spoofing is it two MAC mapping to one IP address OR two IP mapping to one MAC address?

In ARP spoofing, is it two MACs mapping to one IP address OR two IPs mapping to one MAC address? As far as I understand, it should be two MACs mapping to one IP. But I came across this question which ...
2
votes
0answers
38 views

A way of doing secure data exchange in Android?

To my knowledge, all current Android apps with internet permission enabled are prone to apps stealing data. For example, if you have a messaging app, all your messages are readable by the company ...
2
votes
1answer
46 views

What attacks can a subnet gateway perform on the subnet?

What attacks can a subnet gateway perform on the subnet? For example, my ip4 address is 192.168.116.34 and the gateway is 192.168.116.111. What are the threats I am exposed to from a person sitting ...
2
votes
3answers
106 views

Can a malicious computer on a link local network cause harm on another network?

If I had a firewall with two interfaces - one to an internal private network and the other on a link local network (169.254.0.0) - and sent all questionable requests to the link local computer, could ...
4
votes
0answers
71 views

How to send Wi-Fi management frames from macOS?

I realise that this question has been touched on before as linked here. However, none of the solutions suggested solved my question and it fails to answer the overarching question of how to send all ...
2
votes
1answer
37 views

Nmap --script-args usage?

I'm trying to use multiple Nmap --script-args at the same time. $ nmap -vv -p80,443 --script http-errors --script-args "httpspider.url=/,httpspider.maxpagecount=3,httpspider.maxdepth=1" website.com ...
-1
votes
1answer
49 views

Bypassing blacklisted MAC address filtering (that prevents certain MAC address to access router)

PROBLEM OVERVIEW I have a access to a large WLAN network (in a hostel); where lot of students have access to wifi password. So, to prevent sharing this password to others I used MAC address white-list ...
0
votes
1answer
66 views

How is my employer accessing my router when employer's laptop is wirelessly connected to my home network

I have a modem bridged to a modern router running open source software and heavily secured. I have all connections to the router through a personal vpn from a dedicated provider. During work from home ...
1
vote
1answer
67 views

Unable to establish shell with ncat over SSL

I am attempting to get a shell open between a Linux and Windows machine. On the Windows machine, I run: ncat --exec cmd.exe -vnl 4444 --ssl Once it is listening, I run the following command on my ...
3
votes
4answers
123 views

Asymmetric Encryption

I understand Asymmetric Encryption works by having the private key known only to your computer, while the public key is given by your computer to any computer that wants to communicate securely with ...
1
vote
2answers
127 views

How to find and ban some devices from my wifi using the command line? [on hold]

I use Arch Linux. I just installed some packages such as nmap, netdiscover and others. It is a ubiquiti internet network, for the sharing of connection to several routers. There are about 7 routers ...
2
votes
2answers
112 views

How to prevent exam cheating in computer labs using remote access software

My home country trying to crack down on corruption in government job examination cheating. However, some party was able to bribe the lab that conducted the exam and put remote access software into the ...
0
votes
0answers
19 views

Web filters on DMZ network

I'm still pretty new to networking and security stuff, but I have set up a DMZ on my network. I want the DMZ free of all the web filtering I have on the original network. It just seems that every rule/...
0
votes
1answer
40 views

Is it advisable to accept STUN server connections?

My firewall reports outgoing connection attempts via com.apple.WebKit.Networking to a number of STUN servers (namely, stun.nas.net, stun.node4.co.uk, stun.voxox.com and stun.wwdl.net). This is ...
-2
votes
1answer
42 views

What is the difference between DNS flood attack and UDP flood attack?

As title says, what is the difference between DNS flood attack and UDP flood attack? Plus, do they only exhaust the network bandwidth or do they also exhaust the server-side assets such as CPU, ...
1
vote
1answer
33 views

How does Software Defined Perimeter (SDP) protect against certains attack that happen in the browser?

I have been doing a bit of research on SDP (Software Defined Perimeter) but it's still a bit unclear to me how it protects against certain types of attacks. On Wikipedia it says that it can protect ...
0
votes
0answers
16 views

Architecture Diagrams

I am learning about C-ITS and its security protocols and standards. However, as I am doing my own reading, I am having a hard time understanding some of the acronyms on the following diagrams (link to ...
-1
votes
1answer
39 views

What is the Difference between TCP Syn discovery and TCP ACK discovery in NMAP?

when im using nmap for network discovery , i dont understand theses options PS PA PU n when i use -PS or PA or PU ? and what is the difference between them ? @ref: https://nmap.org/book/man-host-...
0
votes
1answer
114 views

Why adclick.g.doubleclick.net listens on all ports [closed]

I have adclick.g.doubleclick.net listening on all ports. When I launch an application like Starcraft 2, for example, it is listening on localhost. Or for some applications, there was a connection from ...
1
vote
1answer
35 views

Obtain NetNTLM/NTLM hash or login

In one CTF, I encountered a task that is solved by getting NetNTLM \ NTLM or just getting username. Tell me, please, is there any protocol that automatically sends NetNTLM / NTLM or username, when ...
82
votes
7answers
15k views

Company claims hardwire connections are a security issue

Someone to whom I am related is at a study camp for their desired profession. This person, let's call her Jane, is supposed to be studying rigorously for two months. The housing provided offers ...
8
votes
0answers
830 views

Intercept HTTP/HTTPS traffic of one application (Windows 10) [migrated]

I'd like to capture all traffic from one particular .exe application. I tried to follow this guide with only the one application running on a windows 10 VM, but the VM was very slow and crashed a ...
79
votes
8answers
26k views

How is no password more secure than username+password?

Context: I have a laptop supplied by my organisation. I am trying to connect to eduroam, but I cannot do it using my organisation's laptop. When I use a personal computer, it asks me for a username ...
-1
votes
2answers
225 views

How to handle the virus on my router?

I believe my router is infected with a virus. If it is, it has been infected for a large period of time (perhaps a year or more). Though, I only started to consider it being a virus around a week ago. ...
0
votes
1answer
13 views

Windows Servers in DMZ - managed via AD or standalone?

All, Currently doing a bit of research on the following topic. From a Security point of view, does it make sense normally to connect the Windows servers that are running within the DMZ and should ...
0
votes
0answers
8 views

Mail gateway on top of Tobit.David mail server

I am looking for an email gateway for automatic en-/decrytion based on the mail content. I thought about trying a hardware gateway. Can I just put the gateway in between the mail server and the ...
0
votes
1answer
138 views

Do vendors put backdoors on network devices?

There are several articles that says that vendors plant backdoors on network devices intentionally, such as this one. They found backdoors that were made by the vendors. Also, I read somewhere else ...
1
vote
2answers
99 views

Am I being Hacked? So many defferent ip's in router firewall logs [duplicate]

My router dsl light was not stable; It keept disconnecting and connecting..So I logged into Router Homepage to check whats wrong and found there were so many different ip's in Router firewall logs I ...
0
votes
2answers
124 views

I used a work VPN on my personal computer at home while doing…“non-work” things…am I in trouble/can they see me?

I was using my own home personal computer on a weekend while connected to my work's VPN (it's called pulse secure), and was bored so I decided to look at some "non-work" related websites (possibly/...
-4
votes
1answer
112 views

Get IP address of camera

Is it possible to get the global IP address of a nearby camera? For example, an IP camera that is connect to a network, but you are not on that network, and cant get access for whatever reason) but ...
1
vote
1answer
65 views

How to detect a scan on a local machine?

Is there any way to detect a scan on the local machine ( the pc that I'm using with a linux os -ubuntu-) from the network that I'm connected to? I know that for the webservers we could check the ...
0
votes
0answers
44 views

Can a phone provider tracked your phone if their SIM is not in the phone?

Let's say I have a dual SIM phone and I took one of the prepaid SIM cards out, the one that is being used to track me. The tracker is unaware that I had another one, and turned off the phone before ...
0
votes
1answer
25 views

Meterpreter reverse shell alternative

What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
0
votes
1answer
226 views

Can Whatsapp be MAC spoofed if the victim's device isn't on the same local network as the hacker's device?

I realize that MAC addresses are only used to tell different devices apart if they are on the same local network. So, what if they're not? Is MAC spoofing in Whatsapp still possible? Even if the ...
1
vote
2answers
118 views

Should organisations allow their employees connect with a VPN software from their own laptops to their machine at work?

I saw a few breaches on a very large scale where an organization like JP Morgan suffered a huge breach just by allowing their employees to connect via VPN to their machines at work. Seems that hackers ...
0
votes
3answers
92 views

Security risks of exposing a VM to single IP address on the Internet

I have a small office network with about 10 workstations and a single physical domain controller. I want to move it to the cloud. For that, I deployed a Windows VM on Azure, which I'm going to promote ...
1
vote
0answers
38 views

Sudden spike in received traffic when connecting to the Tor Network [closed]

Recently when using Tails, I've noticed that the traffic suddenly jumps to over 1TB when establishing a conenction to the Tor network after booting. It doesn't show up in Total Received and also, for ...
0
votes
1answer
95 views

Does using a router connected to an unsecured WiFi network add security?

If I connect a portable router like GL-AR150 to a public, unsecured Wi-Fi network at a hotel and create my own private, password-protected Wi-Fi network, how much more secure is this compared to just ...
-1
votes
2answers
138 views

What's the stealthiest proxy program available? [closed]

If, theoretically, one was using a network that force-disconnects your device from itself if you are detected using a proxy (such as a network configured with Cisco Umbrella or similar), but a proxy ...
1
vote
0answers
32 views

Are parts of my system susceptible to IP based malicious attack even with effective IPtables rules?

Yesterday I installed Cent OS 6 and had to flush the default IPtables rules (IPtables -F) in order to access a web app via my browser. Having very little experience with Linux/Network security this ...
4
votes
1answer
111 views

Simple File Transfer Protocol

My SIEM has produced something intriguing. I went looking for unauthorized SSH connections, and looked for the SFTP protocol by mistake. I found a Windows web server that is connecting from port 80 to ...
1
vote
2answers
54 views

nmap -sn through proxychains fails

Why I can not do the following with nmap? proxychains nmap -A -v 10.185.11.0/24 Output: ProxyChains-3.1 (http://proxychains.sf.net) Starting Nmap 7.60 ( https://nmap.org ) at 2018-08-07 10:12 EEST ...
1
vote
1answer
82 views

Is IP address whitelisting useful if the IP address is not “secret”?

I'm working on an application that will have access to API keys supplied by our users. The application makes API calls on behalf of our users. The API we're using allows users to whitelist IP ...
2
votes
2answers
122 views

Is SSH security necessary on an internal network?

I am running a VM on a spare laptop we have in the office, and have set it up for SSH access from my workstation. Currently I am using user/password authentication, but I would like to remove the ...