Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

1
vote
2answers
70 views

Opened Ports on a Router attack vectors

I have read somewhere that it could be dangerous to use unknown networks because the router owner could open ports and attack programs that would run on the victim's system on precisely those ports. ...
6
votes
1answer
199 views

How to protect a Wifi network from Microsoft WiFi Sense

Microsoft is deploying a new feature, WiFi Sense, which provides users a way to easily share passwords to wireless networks with all of their contacts. This introduces a new security failure mode: a ...
-1
votes
1answer
62 views

How separated should a management VLAN be from the production VLAN?

I was after a little bit of advice regarding Network Management. Users will enter the network and hit a remote desktop server. On from this, they will pass through firewalls to the core switch. When ...
0
votes
0answers
27 views

Get java code to check AP isolation is enabled? [on hold]

I am building a chat application in Java socket programming to communicate locally like IP messenger. When AP isolation is enabled I get only my IP and gateway.gateway. That's why I can't chat to ...
3
votes
2answers
40 views

When should I drop a packet with ICMP type 3, code 9 or 10, TCP RST, or TCP ACK?

This answer says there are a few ways of dealing with a blocked packet at a firewall: At each of these levels a 1st IP packet (and any other protocol packet as an ESP or AH packet) might receive ...
1
vote
1answer
85 views

Private VPN server in public cloud

I need to encrypt all my traffic, because I often work in unsecure network environments. My questions is this: if I buy my server from VPS providers (amazon ec2, digitalocean, etc) - how secure ...
3
votes
1answer
130 views

Is this the end of malware use of DNS?

I read about the release of a free dataset of malware related DNS queries called "Predict". A researcher or network security team can download or query this data set and use it to identify malware ...
22
votes
2answers
2k views

How does this HTML5-based “Mass Router Infection” scheme work?

I read this article stating that purely through a website, "without any user interaction" mass router infection is (/was?) possible. I'm not sure that this problem still exists as it was posted 3 ...
4
votes
1answer
90 views

Is it possible to trace a backend through a reverse proxy?

I'm creating a reference network topology for a WebSocket chat application at work, and I'd like to have something clarified for my own understanding. The current topology involves a reverse proxy ...
-4
votes
0answers
30 views

Wifi penetration testing aireplay-ng does not send packets [closed]

bt ~ # aireplay-ng -1 0 -a 00:19:7e:4d:79:79 -h 00:11:22:33:44:55 -e 4ae8 rausb018:27:07 Waiting for beacon frame (BSSID: 00:19:7E:4D:79:79) on channel 10 18:27:08 rausb0 is on channel 10, but the AP ...
0
votes
1answer
47 views

Encrypting layers of OSI

I was reading that WPA2-PSK encrypts layer 2 of the OSI network model. What is the danger of having this layer in plaintext (I know it can be decrypted very easily from within the network)? Is there a ...
-3
votes
1answer
28 views

Switching between networks,Sniffer Prevention [closed]

Any one to explain the process of switch and architecture in prevention against Sniffers.? Switching between networks is i have been reading and others techniques such as Encryption Secure shell ...
0
votes
1answer
76 views

Securing a Linux Computer [closed]

How would one go about securing a Linux computer? Of course there's the obvious steps, like setting restrictive directory access permissions, and I've heard of LSMs like Apparmor and SELinux, as well ...
2
votes
1answer
80 views

Why would a corporation NOT want to allow users on a corporate network to RDP to their specific desktops?

I have a multitude of users that are requesting the ability to RDP from other workstations, on the same network, to their specific desktop computers. I would like to know what the risks of this are ...
-3
votes
1answer
30 views

A collection of tests and demos for security headers and TLS configurations [closed]

There are (or have been) various websites designed to educate and provide examples on good / bad configurations of security headers and TLS configurations (e.g. https://badssl.com/) I want to build a ...
3
votes
2answers
174 views

Wireless password available in plaintext

Running below command in as admin from Windows : C:\Windows\system32>netsh wlan show profile name=MY_WIRELESS_NAME key=clear Outputs : Security settings Authentication : WPA2-Personal ...
1
vote
2answers
187 views

Can I connect to a network without being detected? [closed]

Some people use software like whoisonmywifi and so on. Is there a way to bypass this software? I think it pings all IP addresses like 192.168.1.0/24 so it will ping all addresses. Can I disable ...
3
votes
1answer
42 views

Event codes for Unix [closed]

I have to write alerts in SIEM Tool. Do we have any events code for Unix as we have in Windows. If yes, where can I find that? If not, on what basis can we write alerts for unix flavours or ...
0
votes
0answers
51 views

How to monitor websites being visited on network? [duplicate]

I want to monitor the websites that are being visited on my wifi network by the different IPs connected to the network. Is there a way to do this, other than Wireshark?
0
votes
5answers
87 views

Monitor websites being visited on network

I need to monitor the websites being visited on my wifi network by the different IPs connected to the network. What is the best way to do this? I spent some time with Wireshark but I feel it is a bit ...
1
vote
1answer
37 views

Link(s) between subnet mask, IP address and subnet ID [closed]

I am studying CompTIA Security+ material and am struggling to understand the link(s) between a subnet mask, an IPv4 address and a subnet ID. The question that I'm working on is as follows: Your ...
0
votes
1answer
48 views

What kinds of attacks can VLAN's mitigate? [closed]

Assuming these very basic kinds of attacks: Header based Protocol based Authentication based Traffic based What would using a VLAN mitigate? Several people seem to be overthinking the question. ...
0
votes
0answers
27 views

SDN Security - why not attack the controller itself?

I have been looking into SDN (Software Defined Networking) and one advantage of using this is to be able to redirect traffic to stop DDoS attacks. The traffic is ultimately thrown away. My question ...
-2
votes
0answers
32 views

Are there any notary-like services for standard HTTP content? [duplicate]

One of the things I've consistently noticed is that a lot of open source projects and companies publish the public keys they use to sign packages on HTTP sites, with no HTTPS equivalent. I've come to ...
2
votes
2answers
73 views

Are documented networks easier to attack? Are undocumented networks easier to protect?

I am learning about network documentation for the first time and have come across the following statement: Undocumented networks might not be protected and can be used to support insider attacks. ...
2
votes
0answers
63 views

Ways to prevent traffic injection by ISP [closed]

I live in a big brother country (Egypt, but valid to many other countries), which apparently bought Hacking team and fin fisher software since couple of years. After reading about the very-easy ways ...
4
votes
2answers
153 views

How do RATs access computers through routers?

I've started trying to increase my networking security at my house. One thing that worries me (because other people in the house are always downloading viruses that come along with "free" games) are ...
2
votes
1answer
58 views

How can I detect subnets? [closed]

Given a WAN, which is connected to the internet via a single exit point. Inside this WAN, I don't want to have any subnet structures. Every user gets his own access point, which he can expand via ...
0
votes
3answers
71 views

Is it possible to get Network Domain from Client with PHP or Apache? [closed]

I'm working on a solution to identify client Network Domain or Workgroup in a private network. Based on it, I must change some access permissions. I can't do that through IP address because it isn't ...
3
votes
2answers
110 views

Share network with neighbor

My neighbor asked me if I wanted to share his network with me. Internet access is a little more expensive here than I am used to in my country. Before saying yes I wanted to know if I had risks in ...
4
votes
3answers
167 views

Is there a way to block your ISP from controlling the password of your main router?

I got internet installed at my home earlier today by Bright House Networks. When I asked the installation technician about changing the router administration password, he said that he can change it ...
1
vote
0answers
60 views

Web/search engine spider on local network?

I was setting up a test webserver on my local network earlier, and whilst sorting out the firewall I noticed the following in the log (/var/log/ufw.log - I'm using UFW on Ubuntu 14.04): Jul 9 ...
1
vote
0answers
57 views

Adding a binary to the firmware of a routing device [closed]

I've been playing around with a router d-link dwr-921 and found some vulnerabilities in the web interface. I still haven't managed to get shell access and now I'm thinking about modifying the firmware ...
2
votes
3answers
100 views

How to protect against rogue Base Stations? [closed]

I just read the answer to the question here and it sounds surprisingly simple for calls/SMS (and data?) to be intercepted by a fake base station. From what I understand, if you were to walk past ...
3
votes
1answer
25 views

Why doesn't netsplit riding work on single node networks?

I've been reading up on netsplit riding (a.k.a riding the split) and according to multiple sources, it's only a risk to multi server networks. Now I understand that a netsplit occurs when a node ...
8
votes
1answer
1k views

Does restricting the names of computers allowed to connect to a wifi network provide any security

In response to a statement elsewhere that MAC address filtering was essentially useless for protecting a wifi network because it was trivially by passable by network attack tools, I was asked if the ...
0
votes
0answers
35 views

Virtually isolate a server test environment [migrated]

What is the minimum implementation that ensures some test servers (like domain controllers) don't send out network traffic that crosses over with production systems? The purpose would be to setup a ...
21
votes
8answers
5k views

Is there a way to make a WEP-secured AP uncrackable?

For some days, I was feeling that my Internet bill was booming. Then, I recently found out that a boy near my house was accessing my router to use the Internet. Then, I read some articles how to crack ...
1
vote
0answers
17 views

Laptop won't detect wifi after an issue with WiFiKill [migrated]

My brother used WiFiKill on my laptop as a prank. I think I turned it off by simply clicking Start on the top middle of the page, to change it from Start to Stop. I thought that had solved the problem ...
1
vote
0answers
41 views

Traffic shaping during a MITM attack [migrated]

In my local network there are about 10 computers. I setup ettercap to do arp poisoning between a particular host and the gateway and now I can see that host's traffic. What I wanted to do next is to ...
0
votes
1answer
163 views

WEP password cracking

I was testing WEP password cracking on my router. I had set a thirteen character password ("TESTING123456") and tried these commands: airmon-ng start wlan0 Then I started airodump-ng using this ...
0
votes
3answers
60 views

Why is shared less secure than open when it comes to WEP?

According to this post, Jeffrey Tippet (Microsoft employee) writes: WEP can run in two modes: shared and open. Despite the names, shared is actually less secure than open. Because of this, our ...
1
vote
1answer
38 views

Padding of 802.11 packet with 0's in libpcap [closed]

I am trying to send probe request to Access Points.But whenever I send a probe request packet it is padded with 0's i.e I see two packets on wireshark for every packet I send : a non-padded packet and ...
3
votes
3answers
785 views

Enumerate the subdomains of a given domain - what's the point?

There're a number of security tools out there that enumerate the subdomains of a given domain. I wonder: What's the purpose of that in terms of security / hacking? Is there any way to do that other ...
-1
votes
2answers
75 views

Client misunderstanding nmap [closed]

My client wants their public facing IP addresses to be secure, but thinks that running nmap port scans will draw attention from hackers. To settle this once and for all, what do you say?
21
votes
8answers
4k views

Is possible to get infected by only staying connected to the Internet (nothing else)?

I have a router and I'm the only user. I have a computer with Linux and a tablet with Windows 8.1. Because of a few problems, I had to reinstall Windows on the tablet. Since I'm a bit paranoid about ...
1
vote
2answers
87 views

Cheap and efficient strategy to protect against professional attack?

With things like NSA or state sponsored attack, it seems that no one is safe from a technical point of view. Is there any efficient method or strategy to protect against them? My guess is that ...
-3
votes
1answer
26 views

Protection of information terminal running Windows OS [closed]

I need an information computer terminal to work 24/7 in a protected public area. Operating system is Windows POSReady 7 EVAL. I need this terminal to send HTTP messages to a single IP address in the ...
9
votes
3answers
586 views

Can an attacker “simulate” a private IP address?

I have a SSH server with a rule that does not allow password connections outside the local network. So people already on the local network, either physically or via VPN, are allowed to connect with ...
0
votes
1answer
14 views

Security risks for a simple network configuration screen in android [closed]

I am building an Android App that pulls chart information from a server where the connection is specified on this view Ideally, the end user will put in a valid host and port resulting in business ...