Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
-2
votes
0answers
45 views

Does laptop camera records us always [closed]

Stop recoding keep us privacy for our laptop cameras stop hacking cameras
0
votes
0answers
44 views

Need help attacking my ethernet network [closed]

I'm forming a start up and want to make sure my COMPUSEC/COMSEC is airtight. We work with a lot of sensitive customer information (think SSNs, bank accounts, etc.), NDAs, and government contracts. At ...
0
votes
0answers
47 views

Is it possible to convert an IP packet into a grayscale image through the help of deep packet inspection? [closed]

I am working on building a malware classifier that works by using gray-scale images of the dissasembly files. This method has been outlined in multiple research papers, here is one: https://ieeexplore....
-2
votes
1answer
100 views

Is it safe to conduct DDoS attack on a live server?

I am new to cybersecurity industry. I want to try if the company server is vulnerable to DDoS attack. Is it possible to conduct DDoS attack without damaging the live server? What I mean is, my main ...
0
votes
1answer
56 views

how can I protect my home network from arp spoofing? [closed]

There are two differing ip addresses with the same mac address ff-ff-ff-ff-ff-ff. Could someone that knows my wifi password do this? I factory reset the router but this is still appearing. What can I ...
-1
votes
0answers
12 views

Can schools see what your on if your using your school laptop hotspot ( which is connected to your home WiFi) and using a VPN [duplicate]

So sometimes when I’m at home my phone sometimes just disconnects from my WiFi but my school computer ( which they give to anybody who needs one in the district)is still connected to my home WiFi and ...
1
vote
3answers
91 views

Are TLS v1.3 connections over open Wi-Fi secure?

If a non-compromised device is connected to the internet via open Wi-Fi, anyone can view the traffic. But if all the connections to the servers use a reasonably secure cryptographic protocol (such as ...
0
votes
3answers
114 views

Why would a legitimate application run on a non-standard port?

Among the many "threats", I see on my SIEM, a non-standard port is a top one. It's always been a false positive, but I don't understand why this happens frequently?
1
vote
1answer
30 views

setting up a lab in virtualbox for different tasks: local net testing & vulnerable virtual network

I have seen several tutorials about setting up Virtualbox networks for Kali & vulnerable machines together using the option Internal network, but I have several questions regarding other ...
0
votes
2answers
80 views

Should login requests be padded to avoid revealing password length?

If an attacker who can watch network traffic knows a victim's username and can figure out which request is a login, then the size of the login request will reveal something about the password length. ...
0
votes
0answers
46 views

Spoofing a server to intercept my IoT device's data

I'm trying to reverse engineer a power meter I've installed to integrate with HomeAssistant. It sends its data to a remote server, where I can log into a UI to view its data. Additionally, they have a ...
0
votes
2answers
56 views

Does a switch protect network [closed]

I got a mesh router downstairs. Aoes a switch protect your network if connected to the mesh router?
1
vote
2answers
46 views

What is the value of port knocking when I have strict firewall rules

I have specifically allowed three external machines to SSH into my server. All other traffic will be dropped. Using nmap from another machine, I am unable to see my server's SSH port and it shows ...
0
votes
0answers
115 views

Can my college read SSL traffic if I don't validate CA certificate? [duplicate]

My college uses eduroam for WiFi. When setting it up, I am advised to install the college's own CA certificate. I am dubious about this as I have heard that it would allow them to perform a MITM ...
1
vote
0answers
55 views

Is it possible to analyse network traffic to find out if spyware is uploading images, location or messages?

I was thinking about spyware and wondered if you could sniff for suspcious network traffic from spyware. Mobile spyware usually uploads messages, location and images, is it possible to analyse network ...
0
votes
1answer
74 views

Unknown WiFi Network

For background, I am being sued by unethical people who would do anything. I live in a rural area and in the network list on my phone and laptop, no neighboring networks appear. Only our own plus our ...
1
vote
1answer
110 views

How to handle a router from an apparently security-indifferent ISP with no possibility to switch?

My ISP's security strikes me as... somewhat alarming to my admittedly non-expert eyes. They store wifi passwords in plaintext on their website and allow changing it there - this is apparently meant to ...
0
votes
0answers
34 views

How to get EvilOSX's Slowloris to work?

I was trying out the Slowloris Module of EvilOSX. I've also installed the Homebrew Apache server on my victim VM using this link. However, when I executed the module, I noticed some packets started ...
0
votes
1answer
81 views

Can attacker who is previous visitor to my home network put factory reset resistant spyware on my pc and phone from the WAN side?

I am amateur/barely novice to home networking trying to narrow down, if at all possible, angles of intrusion. Attacker connects to home network after I willingly give password. Before they connect I: ...
0
votes
0answers
52 views

Windows / OpenVPN "kill switch" via firewall

First, not sure if this is the appropriate site or if it would be better suited for a different one, but there isn't a networking or Windows one, so this appears to be the best place. And I'm posting ...
15
votes
3answers
3k views

Can an HTTPS request be sent twice?

When sniffing network traffic, one can see an HTTPS packet and all its (encrypted) data. I am wondering what would happen if this packet is copied and then re-sent. Is there a protocol at some layer ...
0
votes
0answers
49 views

How do i use custom exe with metasploit

I have my own exe file which I want to use as a custom payload.It's a sample exe file using TCP socket on windows side to link my windows 10 computer to metasploit payload.Here are the commands im ...
0
votes
0answers
55 views

How to understand risk of a hosting ISP private network?

I am trying to understand the security concerns related to using the private network provided by my hosting ISPs. The ISPs offer a private network feature that only my VPS instances are connected to. ...
0
votes
2answers
78 views

Can a device that connected to malicious network once be compromised even after disconnection from malicious WiFi?

I need to take my personal laptop to the workplace so I will be using their internet that only employees usually use. However, if the network I connected to was malicious, is my data only compromised ...
0
votes
1answer
53 views

Will a compromised cable modem inherently compromise any router connected to it under any router config?

I’m planning on setting up a network with a custom-built router with pfsense. If I assume the cable modem connected to the router is compromised can a properly configured router ensure security or do ...
0
votes
1answer
96 views

Ethernet wiretapping attack

I have some questions about the Ethernet wiretapping attack. I have already created a small lab using a cat5e (downgraded to 100mbit), a cat7 and this as a keystone: link. The lab looks like this: ...
21
votes
6answers
4k views

Do machines without any listening services need a firewall to block incoming connections?

Let's assume we have an example machine connected to the internet. This machine is typically a client one, and it has no services like ssh running on. Does this kind of machines need any firewall to ...
1
vote
1answer
77 views

Could a bad actor get hold of your credential sent via https if you are connect to their fake network?

Imagine this typical Fake WiFi scenario: A bad actor creates a fake coffee shop Wifi and therefore is in full control of the network. An unsuspecting victim would connect to the Wifi and log in to ...
1
vote
0answers
106 views

My housemate is spying on my web traffic with their own "faster" router [closed]

I live in a student house with 2 guys and a girl and I'm not very tech-savvy. When we moved in we got Virgin Media broadband. I have set this up before and the admin panel is very basic with no ...
1
vote
1answer
166 views

How can someone on the same GPON splitter network sniff my internet traffic?

I currently have a fiber optic internet connection at home. My ISP uses GPON where the ONU acts as a gateway device which has a direct fiber optic connection to it. ONU is a Huawei HG8145V5. I ...
0
votes
1answer
244 views

Using Github's Public IP Address as Remote URL

My company distributes software that runs on locally installed Ubuntu Virtual Machines. To update the software, we pull our latest code down from Github. Some IT departments have github blocked on ...
1
vote
0answers
75 views

Is it safe to use conntrack on Linux bridge devices?

I have a server with a number of Linux bridge devices for use with groups of virtual machines - some internet-routed, some intentionally unrouted. I have stateful firewalling in place for traffic ...
0
votes
1answer
90 views

If I dedicate one computer to answering emails, and turn network discovery off, will that help protect the rest of my network from malware?

My boss is very concerned about malware. He has heard that malware usually comes in via email attachments, and so he wants me to set up a computer specifically for that task and isolate it somehow. Is ...
0
votes
3answers
110 views

Can a powerline network adapter be more easily used to listen to traffic on another router?

A roommate of mine asked me to connect a powerline adapter to the network. The ethernet cable of the adapter is connected to an Apple Airport Express router which is connected to a Frontier Internet ...
0
votes
0answers
74 views

Network Threat Modeling

There are several threat modeling methods for software, for instance STRIDE, PASTA, LINDDUN and more. When it comes to threat modeling of a whole network, I can see how attack trees and attack graphs ...
0
votes
1answer
80 views

Possible to limit an SSL certificate holder to issuing redirects?

Is it possible to issue an SSL certificate that limits the certificate holder to issuing https redirects? Or more generally, limiting the holder to issuing specified data through the secure pipe, ...
1
vote
1answer
101 views

Could someone the real IP address when using tunnel protocols like ngrok, localtunnel or serveo?

Could someone get the real IP address that is hidden behind the URL generated by tools like ngrok, localtunnel or serveo?
0
votes
1answer
102 views

File transfer service through server that is not P2P, encrypt files without letting the server know its contents

A file transfer tool, that works through a middle man server, as the following diagram: Client A uploads a file to the server, Client B has websocket events that a file is transferring and starts ...
1
vote
1answer
123 views

Misuse vs anomaly detection alerts

Adam always reads his e-mails on Sundays around 5 pm. This Saturday, at 11 am, he accessed his inbox. Which will generate a false positive? Source slide 10/41 Misuse-based IDS or anomaly-based IDS? ...
0
votes
2answers
198 views

Will my administrator see what I did when I deleted my history after my computer became blocked?

I was on my work computer and clicked on one website, then it shows it's blocked. I've deleted history; will my employer/network admin see what I did?
0
votes
0answers
41 views

Listening to other network traffic on a known WiFi network using libpcap

I want to use libpcap to listen to the network traffic on another server on my home WiFi network. In this scenario i already know the password and ssid. I have already changed my network adaptor to be ...
0
votes
1answer
73 views

How to encrypt http traffic in an offline enterprise network?

I am building a golang offline application for a company that will operate in their office internal Wireless / Wired Network. There will be one server computer and many client computers communicating ...
0
votes
2answers
106 views

Importance of OS security patches for devices only used in home network

(This question bugs me because I am not willing to upgrade for Windows 10) If we are talking about a device (i.e. a PC) in the following scenario: The device is located behind a router that is up-to-...
1
vote
0answers
70 views

What prevents attackers from posing as legitimate smb server?

Let's suppose on my computer was a connection to a smb network share, set to reconnect automatically on startup. Now one of the following things happens: The computer is booted up in another network ...
0
votes
1answer
80 views

Getting reverse shell from firewalled target

Suppose this scenario: You are already inside a corporate network. Suppose to find out a RCE in a X service. The machine that hosts that service is behind a network-based firewall, ingress rules and ...
0
votes
0answers
46 views

if i connect to 2 different networks using 2 different VPN clients from a single host, can the host act as a bridge between the 2 networks?

I work for 2 clients. Each requires me to use their VPN client to connect to their network. If I do this simultaneously, then does this create a security risk? My concern is the host creating a bridge ...
1
vote
2answers
107 views

Is there way to know what headers can be accepted by HTTP server?

Imagine that there is server required authentication for getting an access to some endpoint. And developer added some logic to bypass the authentication: if server recieve HTTP header give_me_access=...
0
votes
1answer
72 views

What threats are mitigated by encrypted VPC connections?

We are running a virtual private cloud, in other words a vendor-hosted intranet. (In this case the vendor is AWS, but it could be Azure, Digital Ocean...) The intranet does not have public-facing ...
0
votes
1answer
131 views

What are the risks when using proxy such as Fiddler

I would like to understand a point. When I use fiddler it creates a local proxy to analyze the traffic, so far everything is fine. However when Fiddler is launched and I browse an HTTPS site the ...
5
votes
1answer
417 views

How do VPN kill switches in mobile apps actually work?

From my understanding, a VPN kill switch modifies routing to make sure that all traffic must be sent through the VPN's tunnel interface, and otherwise internet access is restricted. On desktop ...

1
2 3 4 5
55