Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

0
votes
1answer
58 views

Techniques used by highly sophisticated entities to snoop on VPN or SSH traffic?

It is mentioned in almost every where that very strong agencies, and governments are able to watch the online activity of the people. Aside from techniques like attacking computer networks, and ...
0
votes
0answers
9 views

ECC protocol practical implementation in python [migrated]

My goal is to code a program for ECC implementation. Right now i am at the basics and i am trying to follow an example found on the internet. I will give the code below. The problem is the after ...
0
votes
0answers
5 views

Can't log into router after firmware update [migrated]

I have a Motorola WiFi Router setup at home MG7700. After the recent firmware update, I am facing some issues with logging into my WiFi router. Whenever I try to log in to the cPanel of my router, ...
0
votes
0answers
31 views

Can't Ping other devices on the same LAN [on hold]

I'm still new to networking but managed to configure a Mikrotik RB1100AHx2 router to supply internet to our LAN. There is a 24 port switch that some devices are connected to via LAN cables, while ...
1
vote
2answers
353 views

How to connect a Raspberry Pi IDS to the home router to detect intrusions network wide?

I'm configuring a raspberry pi IDS/IPS with ELK stack on a separate machine, my problem is to connecting it to the router in a way it can read traffic on the whole network and drop the suspicious ...
0
votes
0answers
33 views

Secured network diagram help [closed]

Would be very grateful for you're time looking at this. Background You are asked to study a small private microbiology laboratory that is located in Bedford and collaborates with 2 big hospitals. ...
0
votes
1answer
27 views

network icon on lock screen, group policy

In an office setting, where it is an open space design, should I ensure that the laptop has 'Do not display network selection UI', enabled? Why or why not
1
vote
0answers
29 views

UDF Client, Socket Binding and Tags Hack - Need Help [on hold]

Background For a long time now, I've been working to remove a persistent, if not permanent, malware presence on my computers and phones. Every attempt at removal has been unsuccessful to date, by me ...
3
votes
2answers
147 views

Is it dangerous to connect to a public unsecure wifi network a few seconds before connecting to a vpn?

This might be common sense but I just can't seem to get it. I purchased a vpn subscription for security ( I travel a lot therefore I am dependent of public wifi networks ). I have configured all the ...
0
votes
1answer
39 views

ARP poisoning NAC

I need some help in understanding the technique of Genians/Trustwave NAC regarding ARP poisoning. As seen here Bypassing Trustwave NAC, it looks like a good method, but I don't simply get it. With ARP ...
0
votes
1answer
71 views

How are victims targeted from outer networks (WAN)

I started getting more interested about security about one year ago, and from all the things I have learned up to this day I never knew how particular victims are targeted from the attackers from ...
3
votes
1answer
55 views

How do I know that the request and response is using encryption protocols in burp suite?

I know these things can easily be done on wireshark, tshark, etc but is it possible to know that the request I forwarded and the response I received is using protocols such as TLS, TLSv1.2, TCP, HTTP, ...
0
votes
0answers
29 views

Can my work's Wifi see the video I sent through Snapchat [duplicate]

So I accidentally sent a video over Snapchat at work using my works WiFi on my own personal device. To connect to the WiFi I have to put my work user ID and password in and I’m pretty sure some ...
0
votes
0answers
14 views

tcpdump: (all BPF devices are busy) - How to solve this [migrated]

I was running tcpdump and then after some time I got this error: tcpdump: (all BPF devices are busy) I am not sure why? I killed all tcpdump processes, in case that this had something to do with it, ...
-1
votes
1answer
51 views

If there is a way to use insecure USB-connected devices in a secure way

This is sort of like working in a lab with toxic chemicals. There is a way to work and wear certain special clothes so you don't get contaminated. Likewise, I wonder if when dealing with malware you ...
2
votes
1answer
43 views

Where custom auth source code fits into the micro-segmentation, zero-trust architecture

So micro-segmentation seems a bit of a buzz-word, but it helps in painting the picture of how to better do security in a network. Basically from what I understand divide the network into a bunch of ...
1
vote
1answer
103 views

Secure architecture for isolated printer network

I am very new to "networking" and security, but I realize that it would be more secure to have printers on their own "isolated network". How do I secure my networked printers? What kind of printers ...
0
votes
1answer
113 views

Google Chrome Linux with Activity of Unknown Device

I've recently noticed a strange comportment on my Google Chrome Browser with GMail, where suddenly appeared a connected Unknown Device, with a double connection and with the same IP than mine, looking ...
2
votes
1answer
160 views

How to go from wifi password to computer access

In looking at What can hackers do with a wifi password?, it is said: Simply said, if someone has your Wifi password, they have full access to all connected computers and devices within your network....
0
votes
1answer
44 views

Security implications of attaching a wireless printer to network

I am looking at these instructions which suggest basically giving the wireless printer your network password to configure it. I don't know enough about security or networks to know the implications of ...
0
votes
0answers
36 views

Rate Limiting When Users on Same Network [closed]

We're developing a web application, and certain brute force mitigation strategies must be applied to protect our users. Due to the majority of users access the application on the same network ...
0
votes
1answer
46 views

Analyze / Sniff all packets from all devices connected to a router

First of all, before explaining what I'm trying to do, let me clarify that my intentions are not steal any information, as it's only for study purposes, not even for my own entertainment. I'm trying ...
1
vote
1answer
91 views

Ransomware - All computers infected but one

Let's say there is a particular network which has a "monthly" successful cryptolocker attack. Every time, every computer in that network is infected. The set up is like this: 1x Windows 2003 server (...
1
vote
1answer
64 views

Is it possible to eavesdrop the wireless data transmission without being authorized to a router?

I read in computer security book that there are three places in wireless networking where you can be attacked: wireless transmission, access points and wireless network itself. The book illustrates ...
1
vote
1answer
79 views

WiFi name keeps changing not by me

I am becoming more WiFi knowledgeable due to to ongoing problems with my WiFi network password/ WiFi changes being made by someone Over the last year I continue to get notifications that my WiFi has ...
1
vote
1answer
77 views

OpenSSL - how to renew certificates in production?

Have a number of private network services deployed on different nodes outside of optionally encrypted mesh systems, like Docker or Consul. The services have high value and should communicate via TLS ...
1
vote
1answer
31 views

lan-side denial of service affecting target's CPU performance

Why does a LAN-side UDP flood take up the target's CPU resources and make it sluggish? i.e: the mouse doesn't respond properly, opening an application is slow... Note: The computers are both ...
1
vote
2answers
79 views

Airodump-ng : why are BSSID not associated?

Using airodump-ng with my wireless adapter in monitor mode, I am able to get expected scan to run. I have a few questions : Why do BSSIDs show as "not associated" (note: not all of them show as ...
0
votes
1answer
122 views

Double user-agent. Malware?

The place where I work sometime is receiving some alert from the NIPS stating : [1:30918:2] "MALWARE-CNC User-Agent known malicious user agent - User-Agent User-Agent Mozilla" The user-agent in the ...
0
votes
1answer
45 views

dhclient cloud-init /var/tmp process

There's a process that's running that I'm trying to investigate why its running and what its doing. The server is a Linux Ubuntu server running on AWS. Running 16.04. The process in question is: ...
0
votes
2answers
96 views

Find the process that queries a malicious domain every 2 minutes

I found suspicious traffic in a client a few days ago. A process in the client queries a malicious domain every 2 minutes. The domain is hostingcloud.science that hosts a javascript file for coin ...
1
vote
1answer
70 views

Does running Windows XP pose a security threat to the whole internal network?

I have a laptop that is not capable of running any versions of Windows above XP reliably, but that I want to connect to use to browse web using the last version of Firefox available for Windows XP. I ...
1
vote
0answers
22 views

How should I secure my database in Microservice architecture

Can someone tell me whether I should secure may connections to the database from my microservice? Should I worry about the communication between my microservice and database?
3
votes
1answer
128 views

Is it safe to open ports 80 and 443 in a home network

The intention behind this is that I'll be able to host a website from a home server (another pc with ECC ram etc.), but what worries me is that the network I'm using is also the same network which I ...
2
votes
2answers
154 views

What can someone do with (non-admin) command prompt on a network?

Say that an organization has a closed network - only its own computers can access it. Each of these computers has Windows 10 Enterprise. For obvious reasons, users aren't given administrator ...
1
vote
1answer
52 views

How is it possible that you can see connected clients of an WiFi without even connected with it?

Hey folks I have an small question about Network security. I was playing around yesterday with airodump-ng and saw that I was able to see that my other laptop is connected to that WiFi but how is it ...
1
vote
1answer
34 views

On-site Whitelisting vs. Off-site Cisco VPN

A company I’m applying to as web software tester is requiring me to be on-site so they could put me on their whitelist. However, I had a previous job which allowed me to work anywhere, using only ...
1
vote
2answers
154 views

Are botnet nodes made to stop working during office hours?

Some network guys at my work seem to think that a client that we monitor may be part of a botnet, but the spike in traffic that we see at night always stops at the latest around 8am in time for office ...
0
votes
1answer
50 views

Router vs router + switch security

I need to add some more ethernet devices to my network. I'd like to keep the current router and the only possibility to add more interfaces would be USB ethernet / PCI ethernet adapters. I could also ...
19
votes
4answers
5k views

Is strategic cyber-warfare feasible today?

Cyber attacks that target a nation's infrastructure are a documented fact and as such a danger that political and military leadership across the world needs to worry about and act proactively. These ...
2
votes
3answers
352 views

What are some best practices for WiFi security, in light of recently discovered vulnerabilities?

In the past few months, we've seen the revelation of several WiFi vulnerabilities (eg KRACK). It doesn't look like NIST has updated any of its best practices. How should we configure our enterprise ...
1
vote
1answer
101 views

Do I need two firewalls or is one enough?

We have a bunch of company devices (servers, desktops, laptops, company-issue phones, etc). All of these devices are company devices, every employee uses them just for business. All devices should ...
1
vote
0answers
23 views

Can a single domain be deleted from HSTS list through GPO

I have proxy performing a IWA authentication which intercepts the web request and redirects it towards the proxy's host name for auth. The redirect url is over http however the HSTS list on the end ...
-1
votes
0answers
80 views

Get real IP Address behind VPN [duplicate]

Is there any way to get the real IP behind a VPN? If so what is the best way that is possible to do with least knowledge about the subject using it?
0
votes
1answer
74 views

Spooky ISP settings

I recently switched to some local internet provider who is relatively a fresh boy in town. It is a wireless setup, with wifi antenna attached to a router in home. This is a fritzbox kid. I observed ...
4
votes
2answers
69 views

IPSEC connection attempt to rogue server — is my PSK compromised?

I am setting up an IPSec connection between two sites using Ubiquiti EdgeOS-based equipment. Using a DDNS service (a static IP is unavailable from the ISP), they can be found at east.example.net and ...
0
votes
1answer
54 views

Securely connecting a wifi client to an AP using a generated password

I have two embedded systems, one acting as an AP with WPA2 and the other as a client. The idea is for a user to connect their client to the AP without any setup, so the authentication will all be ...
0
votes
2answers
84 views

Logged into same network of residence, owner knows my Mac address.. what can they see? [closed]

Logged into same network of residence, owner knows my Mac address.. what can they see? They are techy and know my Mac address for my phone and PC. Can they see text message to and from me? My email? ...
2
votes
2answers
103 views

Can I see the MAC address of a router on an encrypted Wi-Fi network?

Say that I am within range of a Wi-Fi network that is encrypted using WPA2, but I don't know the password. Is it possible for me to learn the MAC address of the Wi-Fi router that is broadcasting the ...
1
vote
1answer
361 views

Potential router malware? Receiving “Access Denied” and other weird blocks from various websites

So I've been having some weird browsing behavior over the last few weeks and it's gotten a lot worse the last few days. I've been getting blocked/banned by various websites off and on. Here are a few ...