Questions tagged [network]
Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].
2,853
questions
0
votes
0
answers
5
views
Is it safe to host internet exposed websites on my home network? What isolation steps should I take?
I want to host some websites off a isolated vm which is on my home network through port forwarding.
Although I believe this is reasonably safe, I want to physically segment internet exposed VMs from ...
0
votes
0
answers
39
views
Web application rate limiting, IP blocking using different cellular networks [closed]
While testing a web application for rate limiting and IP blocking I noticed the following:
while using 4g through a GSM service provider, the server is blocking me after 300 requests
while using lte ...
0
votes
0
answers
23
views
verification of network security [closed]
is there any canonical way to verify that our web connection is actually secure ?
e.g. "a smoke test" to check for leaks?
I've noticed e.g. applications that can seem to check if the ...
- 101
0
votes
0
answers
47
views
MITM with forwarding between 2 hosts in the same network
I have 3 hosts in the same network, let's say their IP addresses end with:
.10 (Host A)
.11 (Host B)
.12 (Host C)
I want to sniff packets between A and C through host B, so that host B acts as MITM.
...
0
votes
0
answers
42
views
Can I setup and enforce additional WiFi connection (and password) requirements on managed laptops using Windows or MacOS?
Can I setup and enforce additional WiFi connection (and password) requirements on managed laptops using Windows or MacOS?
Such as:
blocking (or entirely hiding) the option to connect to open networks
...
- 6,661
1
vote
0
answers
49
views
Using Android Wireless Hotspot while connected to Hotel internet via VPN
I want to make sure I understand the security implications of this scenario:
I am staying in a hotel.
I have a VPN on my android phone.
I connect to the hotel's unencrypted WiFi network with the ...
- 638
0
votes
0
answers
21
views
Is it possible to count SYN and ACK flags separately in a single rule in Snort?
I want to write a rule for Snort to detect lost traffic in the network. Is it possible to write a rule that, by combining two flags, SYN and ACK, it declares that if the number of SYNs to the server ...
0
votes
3
answers
177
views
Why do most VPN protocols work on the Transport Layer and not on the Network Layer instead?
In both the TCP/IP model and the OSI model, IPSEC offers encryption on the Network Layer (IP), while other VPN protocols such as OpenVPN offer it on the Transport Layer (TCP).
Due to encapsulation ...
- 6,661
1
vote
2
answers
194
views
Decrypting network traffic and finding HTTPS private key
I've been battling with one school task for couple days and can't seem to find any idea how to solve it. The task is pretty simple:
Log in to the server using SSH. The answer to the task is in ...
- 75
2
votes
2
answers
84
views
Firewall to allow responses but block new connections
I wonder if a firewall can support this case. There are two servers: A and B.
A can send a request via an open port to B and B must respond to A during this connection.
B cannot send a request on its ...
- 123
0
votes
1
answer
64
views
Setting up Burpsuite with a machine in another network
I'm currently testing a mobile app (suppose it communicates with the domain blablabla.net).
For the purposes of testing this app, I've set up an android machine on another netowrk, and I'm currently ...
- 3
0
votes
0
answers
54
views
Could a public IP with blocked public inbound/outbound traffic be a risk?
If we have a device that for some reason needs a public IP address and if at the same time the device should only be accessible from within a private network: Could the fact that the public IP of the ...
- 101
1
vote
0
answers
55
views
can I make my home network look like my work network [closed]
We have to sign in and out using the school's network. I have the ssid and the password and the ip addresses. Is there a way to use my home network and make them think I am using the school's network? ...
- 11
1
vote
1
answer
60
views
What information is contained in the local SAM in an Active Directory network
I'm curious in an enterprise network running Windows, what information is available in the SAM of a standard user's endpoint machine?
I understand (and correct me if I'm wrong) that when logging in to ...
- 71
1
vote
1
answer
67
views
Why is TLS communication within a VPC important? [duplicate]
In this sense, I understand the encryption needed between say client and server and all communications that are external.
But for a scenario where for all VMs are in the same VPC and not exposed to ...
- 113
0
votes
0
answers
73
views
How do hackers hack into private network device? [duplicate]
As a picture show above, how do hackers use PC0 to hack into PC1? They are in different private network. As far as I know, we can use VPN to communicate two different private networks, so do hackers ...
- 1
0
votes
0
answers
34
views
How can I forward and capture all traffic from a device (mobile, or PC) from another network?
Let's say Mobile device A sits on Network A, and I want to monitor their HTTPS traffic remotely, how might I go about doing this? I know that locally, on the same network, a proxy debugging tool can ...
- 1
2
votes
1
answer
303
views
How dangerous is sharing a WiFi network with neighbors?
Context. I am moving in to a building where neighbors share WiFi. There are several routers connected with each other, and residents connect to one of the WiFi networks. I was told it's cheaper that ...
- 21
0
votes
0
answers
77
views
Are there security risks with using someone else's ISP?
I recently found out that, due to a mix-up at Australia's National Broadband Network, the connection to our Internet Service Provider had been swapped with a neighbour's. It doesn't look like the ...
- 151
0
votes
0
answers
41
views
Specific station not showing up on airmon-ng though there are two devices connected
I'm on a mac using kali linux.
Why aren't any specific devices showing up despite two devices currently using the wifi?
- 1
0
votes
0
answers
78
views
How can I verify that my DoS attack is effective?
I was trying to simulate a DoS attack on the CORE network emulator using hping3 (Ubuntu). The topology is like three PCs connected by a router. The client's IP is 10.0.0.20/24, The server's IP is 10.0....
1
vote
0
answers
54
views
NMAP sending ARP request to destination IP instead of default gateway [closed]
I am doing an NMAP port scan to a remote IP present in a different subnet. NMAP initiates an ARP request first to the remote IP instead of the default gateway(even if the ARP entry is present in the ...
1
vote
1
answer
220
views
Can kubernetes pods in the same or different namespace sniff the packets of other pods?
Since the pods share the same subnet, is it possible that one pod can sniff the network packets of other pods? Please explain the reason.
Note: I created 3 pods in the same namespace, on one pod I ran ...
- 43
0
votes
0
answers
89
views
Impact of Deep Learning Based Flow Correlation on Tor
It's been known ever since Tor existed that flow correlation attacks can break Tor's anonymity, but whereas in the past flow correlation attacks had a false positive rate far too high to be useful ...
- 1
0
votes
2
answers
77
views
Encryption on IP Tables network Gateway
I have created a network gateway on an Ubuntu server. It has 2 interfaces and forwards the traffic from one interface to another. One of the interfaces is connected with a pfsense firewall that ...
- 1
0
votes
1
answer
53
views
Looking at internal ports through netstat command [closed]
I have a connection to another machine and was looking at which ports are open internally and which ports are open on all interfaces, I ran the following netstat command to achieve this
netstat -ano
...
- 41
1
vote
2
answers
124
views
Recommended temporary key size for communication
What I'm going to do is use AES-256 encrypted network communication to agree upon a pseudo-random key for further communications between two peers, so that every "session" utilizes a ...
- 209
1
vote
1
answer
324
views
Where are wifi passwords stored? [duplicate]
I'm looking for technical details on how Windows, Linux, and macOS all store the SSIDs and passwords for every wireless network you've ever connected to. I've tried searching for this, but my Google-...
- 777
0
votes
0
answers
63
views
Securing an Admin Network for IT Administrators
I look forward to your suggestions. We are concerned with the question of how to best and most easily implement a secure admin network for our IT administrators.
Our team consists of three groups - ...
3
votes
0
answers
81
views
Can botnets/malicious traffic be effectively reduced on my exit nodes?
I host a small collection of TOR exit nodes to the clear net. Believe it or not, the number one complaint I get in my inbox is not due to illegal materials coming through the nodes (of which I have ...
- 192
0
votes
0
answers
106
views
Is it possible to disable screenshare if someone's got meterpreter shell on your PC?
If hypothetically there was a meterpreter shell installed on your pc, are there security features or ways to harden a Windows laptop to prevent the hacker from using the screen share command to spy on ...
- 1
0
votes
1
answer
97
views
Is it possible to fully protect a home Wi-Fi network from remote attacks?
I've read that some ways to secure a home Wi-Fi network include encrypting the network using WPA2 Personal, and changing the default administrative username, password, and network name. But I'm not ...
- 1
0
votes
0
answers
74
views
Can I send confidential information in plain text via an HTTPS POST method?
I have a web app that collects user SSN and driver license number. A POST API via HTTPS send the data to the server. Can I use plain text to transfer the data? Is it safe enough? Is it in accordance ...
0
votes
2
answers
148
views
Why is known_hosts automatically updated but authorized_keys is not?
Referring to this post. We learned about ssh today, and I know that you have to add your public key to the "authorized_keys" manually on the server, but the very first time you log into the ...
- 101
0
votes
0
answers
88
views
How to secure old routers with WPA2 and with old firmware?
There are many old routers that support WPA2 that hadn't had a firmware update released since around 2010. Is it possible to secure their WPA2 implementation considering the more recent ...
- 2,039
0
votes
0
answers
138
views
Can my employer detect that I am using a torrent client on my home pc while teleworking? [duplicate]
I am working from home with a 'work' laptop, connected through a VPN client to my company and also to the customer networks.
I also have my 'home pc' on the same home network.
Both computers are ...
0
votes
0
answers
27
views
In what use case would Mutational and Feedback fuzzing be used in?
I am currently working on an assignment paper that asks how each type of fuzzing would work and in what use case they would be used.
I defined Feedback as a tool that would throw inputs which would ...
- 111
1
vote
0
answers
228
views
How would you hide yourself whilst conducting a scan on a target network to identify open service ports?
I am working on this question which asks how you would conduct a scan of a target network to identify open service ports without revealing your IP address. It wants details such as IP address ...
- 111
1
vote
0
answers
96
views
Is there a real gain in terms of security by not using a reverse proxy?
I need to implement a web application consisting of the components
FE (Nginx + React.js)
BE (Java SpringBoot)
DB (MySQL)
For simplicity we will assume that the DB runs in localhost on BE's machine.
...
- 11
1
vote
0
answers
128
views
I believe hacker got into network and has service running [closed]
I have a modem running on a different subnet than I have my access point running. My modem is connected directly through an ethernet cable to my access point and then I have my Wi-Fi devices connected ...
0
votes
0
answers
51
views
Apparmor what are valid network access policies on apparmor?
I'm trying to restrict network access on an application that I don't want to access the network(iirc the deny net requires specification of not just domain but also of domain socket(2)).
Can someone ...
0
votes
0
answers
43
views
Is is bad that on-prem "prod" DB is accessible/visible from in-cloud dev environment?
We have our dev & prod env split between AWS (databricks workspaces) and on-prem Linux boxes. Specifically, we have DB instances on-prem and have python code running inside our databricks ...
- 113
3
votes
1
answer
667
views
Restrict VPN access to only authorised machines
Let's say the situation is this: I'm a big corporation with a whole bunch of GDPR compliance and other regulatory stuff which means I need to ensure that certain data doesn't leak (so basically most ...
7
votes
3
answers
3k
views
ESTABLISHED TCP connections after opening browser in linux
I am using netstat -acp | grep ESTABLISHED command to check established connection
between with my system.
$ sudo netstat -acp | grep ESTABLISHED
tcp 0 0 rg-Vostro-3546:51874 server-18-...
- 187
0
votes
1
answer
95
views
Difference Between Exploit Kits Vs. Probing a Network for Vulnerabilities
I don’t understand exactly the difference between websites using exploit kits on visiting users vs. a website server probing a network for vulnerabilities and then exploiting them.
The scenario is ...
0
votes
0
answers
413
views
UDP Port Scan Attack from a previously used IP address
Yesterday my internet connection is interrupted and I checked the logs. In logs, I saw 2 UDP Port Scan Attack happened a week ago. After a little bit of research, I convinced myself that it is common ...
- 1
0
votes
0
answers
49
views
Will enabling 4 only mode in a smartphone, prevent hackers from downgrading your connection to 3g/2g
My question is Will enabling 4 only mode in a smartphone, prevent hackers from downgrading your connection to 3g/2g through fake towers.
0
votes
1
answer
86
views
icmp smurf attack
I am learning about ICMP smurf attack and for this, I have forged a packet with the following details:
source_mac_address = **??**
destination_mac_address = router mac address
char ...
- 101
1
vote
1
answer
151
views
nmap: no exact OS matches when adding the exact signature to nmap-os-db
I'm currently trying to learn Nmap -O (OS guess feature).
I'm launching the following command: nmap -O 172.17.0.3
This command is generating the following fingerprint as output:
No exact OS ...
- 11
0
votes
0
answers
43
views
Unable to Understand the Data Flow and Network Security Architecture
Received the attached Network Connectivity Diagram with Network Security Components Integrated in the Network
Can some body explain how the Network Security is Applied for Threat and Intrusion ...
