Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

0
votes
2answers
33 views

Logged into same network of residence, owner knows my Mac address.. what can they see? [on hold]

Logged into same network of residence, owner knows my Mac address.. what can they see? They are techy and know my Mac address for my phone and PC. Can they see text message to and from me? My email? ...
0
votes
0answers
16 views

Traceroute / mtr show only 2 hops [on hold]

traceroute to google.com (216.58.209.174), 30 hops max, 60 byte packets 1 192.168.0.1 0.941 ms 1.270 ms 1.575 ms 2 216.58.209.174 18.725 ms 19.184 ms 19.826 ms traceroute to yahoo.com (98....
0
votes
0answers
13 views

Could an intermittent or “resuming” connection be caught as a TCP port scan attempt?

I'm learning how to properly configure iptables to fend off TCP port scans on a hosted Linux-based VPS -- I'm not particularly interested in blocking this kind of attack, but rather in understanding ...
0
votes
0answers
27 views

Ubuntu VM with full disk encryption running off NFS share: implications for data security in transit over network?

I am currently experimenting with running a few VMs, and I'd like to consolidate the VM disk images on a NAS. To be clear, that means there would be a single NAS on the network, as well as several ...
-1
votes
0answers
41 views

Why might tcpdump be preferred to Wireshark? [on hold]

Are there any reasons why I should be using tcpdump over wireshark? I haven't done much packet sniffing before and I am unclear as to why you would use a command-line based sniffer over wireshark ...
2
votes
2answers
74 views

Can I see the MAC address of a router on an encrypted Wi-Fi network?

Say that I am within range of a Wi-Fi network that is encrypted using WPA2, but I don't know the password. Is it possible for me to learn the MAC address of the Wi-Fi router that is broadcasting the ...
0
votes
0answers
34 views

How to access my VM to pen test it through another VM? [on hold]

I'm a total beginner in security and network in general, and I have an assignment - I was given a Linux server that has a number of security flaws that I need to find and report on. Currently I have ...
1
vote
1answer
60 views

Potential router malware? Receiving “Access Denied” and other weird blocks from various websites

So I've been having some weird browsing behavior over the last few weeks and it's gotten a lot worse the last few days. I've been getting blocked/banned by various websites off and on. Here are a few ...
0
votes
0answers
12 views

How can I find out clients connected to a wifi network? [duplicate]

How can I find out clients (MAC addresses) that are connected to a wifi network (that my device is not connected to)? When I am connected to a wifi network, I can use tools like nmap or even ping to ...
0
votes
0answers
17 views

Weird nmap hostname detection (DNS is corrupted?) [closed]

Is it possible that DNS server (most likely built-in into router or switch) may be corrupted in a way that upon reverse name resolution of computer it serves a random DNS domain as the answer? I was ...
0
votes
1answer
63 views

For servers that are not internet facing, do they need to be authenticated to each other and should their communication be over HTTPS? [duplicate]

My gut instinct is that best practice would be to ensure that all internal servers communicate over HTTPS and that all servers are authenticated to each other. That would indeed be dream case ...
0
votes
0answers
10 views

Why Isn't Netdiscover Working On My Virtual Machine? [migrated]

I am doing a vulnhub CTF walkthrough (Lampiao). I have my main VM set up using Kali Linux in VirtualBox. The victim VM is the Lampiao machine. I am supposed to run Netdiscover on Kali to search for ...
1
vote
0answers
64 views

Router detects my Nessus scan and kicks me off the network [closed]

I'm trying nessus on a public router. When I run a scan on the router at 10.0.0.1, the router somewhat detects it and proceeds to kick me off. If I put targets : 10.0.0.2-10.0.0.255 (scann all ...
2
votes
3answers
146 views

Linux tool for monitoring network activity by application

My laptop have been hacked a few months ago and my data is being to uploaded to some remote server without my knowledge. Is there a way I can find it out and prevent it from happening? I have ...
0
votes
0answers
21 views

Sniff traffic on another interface of a Router

I have 3 routers connected side by side. A | R - R - R I am behind the middle router. Is it possible to sniff the traffic that is flowing between the routers when I am connected to a ...
0
votes
0answers
22 views

Options for adding WEP / WPA to my home network [migrated]

Recently I had to upgrade my router with my ISP. When I got home I was shocked to discover that WEP / WPA features were removed, and I need them for my courses in wireless hacking. My home phone is ...
0
votes
1answer
43 views

How can I make my Windows Server accessible from another Windows PC over the internet safely, without using VPN?

First, some backrgound context as follows: I have a Windows Server 2008 running for my company. It contains an ERP, which is accessible by other computers/clients on LAN. During the client setup, the ...
0
votes
0answers
100 views

Is this network configuration secure?

I recently moved into a student house; there's 200 or so people living here, and I'm guessing a good portion of them are CS students, hence I'm wondering wether or not the network setup here is secure ...
1
vote
1answer
54 views

Default or Guessable SNMP community names: public

We have detected "Default or Guessable SNMP community names: public" vulnerability in one of our printer through Nexpose. The remediation states we have to secure SNMP installation. What does it mean ...
0
votes
1answer
81 views

Could an Smart TV be a threat for a hotel?

After some research I found that a Smart TV which is connected on the Internet could be vulnerable to threats such as monitoring, taking control of the tv etc. I wonder if a Smart TV which is used by ...
2
votes
2answers
42 views

What exactly does a default port scan look like? I am trying to run a default port scan without setting off the ids on my test network

What is the best option to use for a default port scan of a server on my test network without setting off the ids using nmap. -f is not a switch i am wanting to use.
1
vote
1answer
28 views

NAS with a public IP and multiple file sharing services – security concerns

I've ‘inherited’ (it's now my responsibility to take care of it) a WD My Cloud EX2 with a public IP and since it's exposed to the internet, I want to make sure that the data and other machines on the ...
0
votes
0answers
74 views

Is it possible to sniff traffic between two routers? [on hold]

Based on the diagram above, I was trying to simulate an attacker senting a RST packet to terminate the connection between two routers. I've tried to use ARP Poison on both routers but after sending a ...
0
votes
0answers
42 views

Detecting network attacks by processing individual or multiple network packets?

I am trying to create a tool that identifies network attacks using machine learning, something like a small intrusion detection system. I have collected benign traffic from the network and then ...
5
votes
1answer
68 views

Can I use `lsof` to reliably determine which local process has connected to my open port?

Say I'm running a server application on 127.0.0.1:7646 and a local process (possibly owned by a different user) connects to it, I can run lsof -Fp -i TCP@127.0.0.1:7646 -i TCP@127.0.0.1:<...
3
votes
3answers
90 views

Should I block IP adresses that made attacks attempts and were block from an IPS through the rules?

We have an NIPS blocking attacks based on bad behaviors (rules checking the data in the network packets). Should I block the IP that the NIPS linked to attack attempts? It feels like the NIPS is ...
3
votes
1answer
51 views

AWS Flowlog for Private Subnet Showing Routable IP's

When reviewing Flowlogs for a host on a private subnet in an AWS VPC that routable IP addresses are being rejected. How is that possible? I expect IP addresses from the private subnet could be ...
0
votes
0answers
51 views

BOGON network traffic alerts

I am analyzing some network logs captured in a school from all sorts of hosts e.g Chromebooks, BYOD Android phones and is hard to track exactly the type since wifi is open. I see some strange ...
3
votes
1answer
75 views

SOX Compliance - Is Running EOL Equipment Considered a Violation?

Let's say I have some networking equipment that will no longer receive vulnerability patches after 2019. This equipment makes up the spine of the company infrastructure. Let's say it's definitely ...
3
votes
0answers
78 views

How can Nmap bypass Windows Server firewall rules?

I need to block all communication (inbound/outbound) from server A to server B (all ports/all protocols). Server A should communicate with every machine except server B. I can't place firewall rules ...
2
votes
0answers
50 views

Decrypting DH traffic in DMZ

We have various servers in our DMZ's. Some of them are behind load balancers (but only few). We also have BlueCoat SSL Visibility Appliances currently deployed in passive-tap mode (we get the inbound ...
1
vote
0answers
46 views

Monitoring and Securing IoT devices [on hold]

I have a mix of IoT devices at home. Alexas, WiFi PLugs, Smartthings (with related Z-Wave/Zigbee devices). I've been on the hunt for a solution to monitor what these devices send out and secure data ...
0
votes
0answers
3 views

Setting up virtual machines for practicing pentesting. Wifi adapter (D'link dwa125) wont allow bridged vm network [migrated]

Im running Kali 4.18 as host and trying to set up a virtual machine running Windows XP SP3. There is no way for me to connect my desktop to the internet with an ethernet cable, I must connect via wifi....
0
votes
0answers
24 views

Safely perform TCP traceroute from user request [migrated]

I need to perform a TCP traceroute using either the Linux traceroute or another package, but I'm struggling to find a way of making the request from PHP without needing sudo privileges. Because the ...
1
vote
1answer
77 views

NMAP reporting all ports open

I'm trying to scan my targets for open ports. However, NMAP reports all of them as 'open'. I know there's a firewall in between. I tried the SYN scan, and when I check the traffic in WireShark I see ...
0
votes
3answers
124 views

Can information sent over unencrypted http still be seen if I'm on an encrypted wifi?

I was booking a haircut online and noticed that when they made me sign up for an account, the credentials were not being encrypted (or at least that's what firefox was telling me). It's not a huge ...
0
votes
1answer
22 views

Is there any other way through which an attacker can obtain user data from HTTP response except MITM and CORS attack?

I am doing some research for my college project and I want to ask is there any other way through which an attacker can obtain data from HTTP response except MITM and CORS attack. For an example, If I ...
0
votes
1answer
53 views

Visibility of network traffic in Teamviewer

I intend to use public wifi to access my home computer from the local library. I was wondering if I remote login to my home computer using Teamviewer on a compromised wifi, will a hacker be able to ...
1
vote
0answers
26 views

What is the subset that represents well a netflow dataset? [closed]

I want to analyze a Netflow dataset by using a sliding window, therefore, I would like to know what should be taken into consideration when splitting the data? The parameter that I am considering is ...
0
votes
0answers
27 views

MITM between device and PC in a different network using adb

I am trying to intercept my Android network. Is it possible to intercept network traffic between an Android device and my computer only by using ADB (Android Debug Bridge)? Only a cable should be used ...
2
votes
2answers
37 views

Secure authorization for subscription-based games or services

Let's suppose I'm developing a subscription-based desktop game: the player pays a fee in order to get access to certain levels of the game for a certain time. For example, the player pays $1 to get ...
1
vote
1answer
59 views

Where exactly in the OSI model does TLS/SSL belong [duplicate]

I am trying to understand where exactly SSL/TLS sits in OSI model. If I look at this answer on StackExchange, While all network models are imperfect, this question can only be answered by looking ...
-1
votes
1answer
37 views

Infection of malware

Lets say, My firewall is configured to block any incoming connections My browser doesnt allow any traces and scripts I have vpn on My browser always asks before downloading files My browser doesn't ...
0
votes
3answers
93 views

Encryption of TCP communication?

I am using an exe application which is communicating with a Raspberry Pi device with manually configured TCP ports. The application will send data from port 1234 to the Raspberry Pi which is listening ...
1
vote
1answer
40 views

OpenVPN one account multiple servers & Load Balancing

I have recently been experimenting with OpenVPN. My aim is to create a group of servers in different locations with a single username and password for each user stored in a central database. For ...
1
vote
1answer
85 views

How to pass a localhost check for an incoming request?

I'm trying to send a request to an http server hosted on a machine. The http server is in C# and drops any packets that are not from localhost: public void Request(HttpListenerContext context) { ...
0
votes
1answer
74 views

Authenticating Certificate for School Wifi [duplicate]

My school wifi, which requires me to login using ny username and password, is requiring that I accept a certificate in order to connect. I don’t know if this is a trusted root certification but what ...
0
votes
0answers
45 views

Should we stop using NAC for our BYOD deployment and switch to SDP?

We keep getting advice without really explaining why transferring to Software-defined perimeter is more beneficial even we use already NAC in the organization. I don't understand the reasons for this ...
1
vote
0answers
34 views

What are the most important security controls to implement when deploying BYOD in an organization? [closed]

In organizations like banks that have already many security controls. Will implementing BYOD (our organization employees will be able to use their own computers to access the organization when they ...
0
votes
1answer
105 views

Is my network infected? Suspicious messages and devices slowing down

Recently a family friend has been complaining that he has been getting hacked on his home network and that he has been receiving suspicious messages from the attacker. He says that the attacker has ...