Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
0
votes
1answer
32 views

Does HSTS provide security advantages on private networks?

For systems that only connect to the internet via a single dedicated private network (no WiFi hotspots), and assuming no systems or components on that network are compromised, does HSTS (HTTP Strict ...
0
votes
0answers
28 views

Creating a small internal 'server' storage for an office [closed]

I have an office, where everyone uses the broadband stick on the office desktop PCs to connect to the internet (wifi receiver) by connecting to our ISP-given router. Now I need to set up an internal ...
0
votes
0answers
35 views

What happens when a router hits it's IP limit? [closed]

Say all of the internal IPs are taken, what happens when trying to connect to that network? Does it stop you from connecting, or does it kick out an existing connection to make room?
-2
votes
0answers
28 views

How to configure Virtual machine IP and host IP [closed]

I have been given an static IP address and I need to configure my VM running on Linux to use this IP address. How, in this case, would my host IP be configured? Does my host IP need to be another IP ...
0
votes
2answers
70 views

Speed issues with VPN to cooperate network in Europe from Asia - is it possible to attach a local VPN server to the europe network? [closed]

Got this situation where we are forced due to security reasons to only be allowed to connect through VPN to our network - which is fine when you are in Germany (GER) where the main office is located, ...
0
votes
1answer
80 views

Security of service requests on a public Wifi

I'm currently rebuilding my network infrastructure and am planning to make my NAS available trough an OpenVPN server running on my router for "outside" use (no port forwarding: NAS in private LAN, ...
0
votes
1answer
74 views

I've sent a clear copy of my ID card using the WiFi at work

The title says it all, I needed to send my ID to some website so that they could verify my identity. But I took the picture with my phone, then sent it to myself via Messenger on iOS. I sent the ...
1
vote
2answers
50 views

Securing Client-Server Architecture with VPN or a SSL-connection?

I developed a mobile application that runs on our company's mobile terminals. The mobile application connects to the company servers via GSM network. We had a meeting to decide how to secure the ...
2
votes
2answers
148 views

FarCry 1 Server Security Risks?

Some friends and I want to play FarCry version 1.40 on PC over the internet on our own private server but we have some security concerns. Since the game was released 15 years ago and we'll be running ...
17
votes
2answers
3k views

Potential risks of publicly uploading a Wireshark trace with TLS-related information?

Say I were to upload a Wireshark trace to a website that was publicly available. Say, with it, the SSL key log, certificate information, etc were available. If someone had the link to the trace, what ...
2
votes
1answer
81 views

Can my work computer sniff my home network? [duplicate]

Can my work computer sniff the websites that my parents personal computer go through? I know this would be very unethical for the company to do so but I never realized this is POTENTIALLY possible ...
1
vote
1answer
62 views

Risk of contamination when network discovery is on + file sharing password?

We use the Windows 10 file/folder sharing feature to share files between two computers (A and B) that are on the same wifi network. In this network there are several infected computers (computers C). ...
-2
votes
3answers
344 views

My home router has been hacked, what can I do? [closed]

My router has been hacked and all devices have had some sort of spyware installed (Don't ask me how I know this, just please take my word for it). Since they can see everything I do on my devices, ...
0
votes
0answers
39 views

Command line tools for checking if a VPN is leaking on a headless device

I have a headless device that is connected to a router with a VPN connection. Not al the devices connected to the router go through the VPN connection, since I have set rules on the router to tell it ...
1
vote
0answers
38 views

How can access to Intel ME / AMT be disabled with firewall? [duplicate]

Short of flashing BIOS, there seems to be no way to disable the Intel ME. So, is there a reliable way to block access to Intel ME, such using HW firewall (Firewall in front of the machine, not ...
0
votes
0answers
66 views

Cups encryption between server and printer

I wonder how safe is the connection between cups and a network printer. Connections from client to cups can be managed as TLS. However what happens bewteen cups and the printer? is all in clear ...
0
votes
1answer
143 views

Thought process behind firewall design

I'm preparing for an introductory information security examination in university and this is one of the tutorial questions on Firewall design. My concerns for the provided solution is how to define ...
0
votes
1answer
62 views

Is a VPN and Virtual Machine secure enough for running programs that might include malware [duplicate]

I am trying to start a business online but don't want viruses from any sketchy software that I will be downloading. I will be using a VM and a VPN but was wondering if I needed any other software so ...
1
vote
0answers
21 views

WMI Performance Adapter function for Chrome browser?

Does someone know why the WMI Performance Adapter (WmiApSrv.exe) always starts when launching Chrome browser? Whats the function of this service? I have heared this service can be maliciously used to ...
6
votes
3answers
190 views

Could a desktop application disclose location even if a VPN is used?

When using a proper VPN to access a remote server, the server should not be able to resolve your country of origin using your IP address because the IP provided in the request will be the one of the ...
1
vote
0answers
62 views

Bought used IP security camera, should I reflash the firmware?

I bought an used IP security camera on eBay, I dont know who was the previous owner. I've always thought that we can't trust 100% any firmwares/OSes that were been installed or used by someone else. ...
0
votes
0answers
3 views

How do you disable NetBIOS traffic on Mac OS? [migrated]

I noticed after running Responder on my internal network that my MacBook Pro is sending out NetBIOS name query requests looking for __MSBROWSE__ and WORKGROUP which Responder will send a poisoned ...
1
vote
1answer
146 views

Why is home Windows 10 machine listening on port 8080 by default?

Ever since we upgraded one of our home windows machines to Windows 10, Kaspersky has been logging blocked network intrusion attempts over port 8080. The exploit is a strange one and tries to hit a ...
2
votes
1answer
66 views

HMAC and integrity

I'm studying network security and I found this question in my slide, but don't have an answer. Discuss the use of keyed HMACs for guaranteeing the integrity of a file being transmitted over the ...
2
votes
0answers
32 views

Can NAT Table be vulnerable toward any poisoning attacks?

I am learning the general concept of network security, and becomes aware of two poisoning attacks on the network infrastructures, that is, DNS poisoning attacks and ARP poisoning attacks. They are ...
2
votes
0answers
79 views

Is there a name for creating a malicious subdomain under of legit domains, like XXbadsiteXX.blob.core.windows.net?

This is similar to domain shadowing, but there is no compromise taking place of a registrar account; these sites let users create subdomains. I was wondering if there is a proper name for this kind of ...
1
vote
3answers
121 views

MITM: Is and How is it possible to manipulate HTTP POST data sent by the host to the server

Is it and how is it possible to modify a HTTP POST parameter that is being sent by the host to a server assuming that you are in a man-in-the-middle position in a network? HOST(POST=foobar) --------> ...
2
votes
1answer
87 views

Can a VPN provider or actors within its infrastructure access open ports on the client machine?

From my understanding of a VPN, it essentially creates a network between the two 'machines'. So if I have open ports (e.g. HTTP, SSH) on my client machine, those can be accessed by the VPN provider or ...
2
votes
1answer
55 views

Automatically change connection of VPN when accessing certain websites

So I am quite new to VPNs, just downloaded and installed NORDVPN despite the latest admission of security breach for a trial period. I am also running BitDefender TS on my computer. I wanted to know ...
0
votes
0answers
41 views

Why is TLS called application-level protocol? [duplicate]

I read this paragraph from rabbitmq networking page: Clients communicate with RabbitMQ over the network. All protocols supported by the broker are TCP-based. Both RabbitMQ and the operating system ...
-1
votes
1answer
48 views

threat intelligence gateway [closed]

A TOG (threat intelligence gateway) is a hardware piece that sits between the router and the firewall. The TIG uses the threat intelligence and filters out the malicious urls and IPs before reaching ...
2
votes
2answers
81 views

How to mimic a HTTP POST request?

I want to mimic a HTTP POST request that I intercepted and have raw on a file, what would be the best way to send it and be certain that I sent exactly the same request? example file: (private data ...
3
votes
1answer
171 views

It is not a hotspot, it was made to look like one while attacking my network [closed]

It is my first time posting on this forum, so correct me if I do things incorrectly. My ISP is Xfinity. I use their modem/router. I have been noticing unusual activities from my network and an ...
3
votes
1answer
307 views

How secure/safe is Eduroam?

The higher education institution that I attend uses Eduroam, a infrastructure and IT company that often caters for the infrastructure and network needs of research and educational organisations. I am ...
0
votes
2answers
68 views

firewall behaviour

If a client connects to a server he will start listening for the response on some random high port number. The client then expects any packet destined for that port to be a valid answer. Or does he ...
0
votes
1answer
73 views

ip_forward reverting back to 0 during ettercap subnet scanning [closed]

Im trying to arp spoof a local network but the /proc/sys/net/ipv4/ip_forward is reverting back to 0 when ettercap is performing subnet scan on a network hub. Even if i change it back to 1 after the ...
0
votes
0answers
39 views

Is it OK to use HTTP for internal communication between two micro-services deployed on AWS ECS fargate?

I have micro services deployed as AWS ECS Fargate containers. For internal communication they are using service discovery end point. In my opinion, it is OK to use HTTP for internal communication. ...
0
votes
1answer
51 views

SSL decryption/visibility on the host [closed]

Can host app see traffic before network encryption? E.g. can a host-based VPN app see cleartext traffic (http to https) to make any traffic routing decisions? Considering the TCP/IP model, all operate ...
0
votes
1answer
136 views

How safe is NAT in keeping my private network private

To extend on How can a webpage scan my local, internal network from the Internet? how safe is my private network against possible threats like DoS attacks, spoofing attacks, revealing info about my ...
20
votes
3answers
3k views

Why is it called a stateful and a stateless firewall?

I'm just wondering about the naming of these firewall behaviours. My basic understanding is that stateful filtering lets inbound traffic to return the outbound response without explicitly specifying ...
0
votes
1answer
120 views

What is the difference between a jumpbox and a reverse proxy?

These two seem to be an intermediary for external network and internal network. What is the correct use for each deployment? What are their differences?
0
votes
1answer
86 views

Nmap scan slow on some IP ranges [closed]

I'm a security newbie trying to scan a VPN in the range 10.0.0.0 - 10.0.15.254 using nmap on Kali Linux. The routing table: route -n Kernel IP routing table Destination Gateway Genmask ...
-1
votes
1answer
58 views

Would a firewall contain an explicit allow rule at the top?

Someone in an interview today told me every firewall has two rules: explicit allow at the top and explicit block at the bottom. Form the way I've always understood things firewalls are normally set to ...
5
votes
1answer
122 views

Detecting (and locating) rogue PXE server on a local area network

The computers on our office building are (via BIOS) configured to boot PXE as first option. This is a useful setting, as long as, when needed, we can remotely restore non-booting machines and all that ...
0
votes
0answers
17 views

Snort stops generating alerts when HOME_NET changed to public addresses

I have used snort for traffic analysis quite often and it worked fine as it generates rules that are corresponding to packets doing malicious activities on my HOME_NET which is always private ...
0
votes
1answer
94 views

How to create content rule in Snort

The aim is to detect, if anyone in the HOME_NET is searching for a particular term - say "terrorism" and generate an alert via a content based rule. I am using Snort 2.9 installed in a virtual ...
2
votes
1answer
111 views

Encryption on Mobile Devices - Multiparty Encryption - Key Management

I have the following setting: Let A, A', A'' be different mobile devices. They want to sent a secret message M to all (or some of) the C,C', C''. The message is passed on to B that stores it for some ...
0
votes
1answer
188 views

Preventing Basic Directory Traversal Attack in Linux application

I have a Raspberry Pi connected to my network and keep getting this vulnerability warning from my security software. I turned off the apache2 web server on the Pi, which fixed my port 80 issue but ...
0
votes
0answers
34 views

How to bypass egress traffic filtering for a reverse shell? [duplicate]

Say I have access to a linux server as non-root user (gained RCE using an exploit), say I am only able to run commands via http in bash/sh but I'm unable the to make the targeted server connect back ...
0
votes
0answers
49 views

How to read SlowHTTPTest range attack when Nginx is the server?

I'm running an application hosted on Firebase and did some tests using SlowHTTPTest. For SLOW HEADERS, SLOW BODY, and SLOW READ the output is quite similar, i.e. the service is available which makes ...