Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
0 votes
0 answers
21 views

Network Traffic Simulator to Test a Botnet Detection Tool

I am developing a Botnet Detection Tool. I am looking for a Network Traffic Simulator so that my software can analyze the traffic and detect potentially infected nodes that are acting maliciously. It ...
user avatar
0 votes
0 answers
25 views

Discovering Devices Behind NAT?

What are all the techniques to Discover Devices behind a NAT? I would like to be able to gather as much information as needed regarding those devices including ip address/ mac address/ OS ... all what ...
user avatar
  • 1
-1 votes
2 answers
100 views

What’s the most secure way to obtain & use a computer [closed]

What’s the most secure way to obtain (purchase) & then use a computer/device? I.e. even if I pay cash for a Mac at Apple. Right when I put in my Ethernet cable wouldn’t Apple see my IP address and ...
user avatar
0 votes
0 answers
20 views

Can Proxy replace VPN? [duplicate]

I was reading about proxy vs VPN, to summaries that one could say that VPN is similar to proxy with the addition of encryption for better security. So I have a question, wouldn't it be better to use ...
user avatar
  • 1
-1 votes
0 answers
44 views

What is the math behind SYN cookies?

I understand the reason behind syn cookies is to defend the server against DoS through syn flooding by syn requests from spoofed IP addresses. I also understand that its feature is that it doesn't ...
user avatar
  • 1
0 votes
0 answers
19 views

Which is more secure and better practice? Setting up a reverse proxy on backend with localhost or on a separate VM and route to other VMs/services?

I wanna know if it's better in terms of security, availability and best practice to set up a nginx reverse proxy on my backend and use it with localhost or to set up a VM that handles everything for ...
user avatar
0 votes
1 answer
59 views

File sharing with compromised Windows machine

I want to connect a known to be compromised Windows machine to the network for file sharing, it has lots of pirated software installed therefor not secure. Can it be isolated so that nothing can ...
user avatar
  • 1
0 votes
0 answers
12 views

Leaving half open or full open connection having SYN cookie

Suppose an attacker collects a large number of initial sequence numbers sent by the server. Can the attacker cause the server to create many fully open connections by sending ACKs with those initial ...
user avatar
0 votes
0 answers
67 views

How are scam call centers cctv stream easily hacked by scam baiters

Recently i have been seeing the videos of fake call centers being busted by scam baiters like Mark Rober In all of these videos the scam baiters are easily able to hack into the the network camera ...
user avatar
-1 votes
0 answers
35 views

What is this unknown 10-digit device address? Found on an iPhone [migrated]

I saw this unknown address under my personal hotspot summary on an iPhone: e:69:a5:97:7:17 Interestingly enough, it only has 10-digits so it cannot be a MAC address. What is it then? Should I be ...
user avatar
1 vote
1 answer
43 views

Onion Routing Encryption

I'm curious how, in onion routing, the relay nodes identify which node to forward the message to? From my understanding the message must travel a specific path based on the keys the user has. I don't ...
user avatar
  • 113
0 votes
1 answer
99 views

Why don’t routers request permission when attempting to connect to an unknown address? (Or why do they still assume every connection is trustworthy?)

I’m imagining a system similar to UAC on Windows but implemented at the router level for IP addresses instead. (Or AS numbers, BGP numbers, Port number, etc…) Naturally this makes router setup ...
user avatar
  • 101
0 votes
0 answers
19 views

tcpdump in Kali Linux VM does not capture scp

I'm learning how to develop tests for a hardened server my company is developing for a client. The test configuration will consist of the test target (the server we're developing) and an external test ...
user avatar
-1 votes
1 answer
102 views

Trying to decrypt my home network

I've put my wireless card in monitor mode following this tutorial. After that, I started monitor my wifi home and, after a few seconds, I stop it. Every packet was crypted (obviously), so I follow ...
user avatar
  • 101
0 votes
0 answers
60 views

Using someone else's SSL certificate [duplicate]

As far as I know, the SSL certificate is public and anyone can read it. Is it possible in this case, for example, when someone, having copied the SSL certificate of my bank for himself, will be able ...
user avatar
  • 9
0 votes
0 answers
18 views

What is the meaning of 'rw' in SiLK commands?

SiLK, the analysis tool for processing flow records, offers multiple tools which begin with the letters "rw", e.g. rwfilter, rwcut, rwuniq, etc. I would like to know where they got those two ...
user avatar
  • 390
0 votes
0 answers
30 views

Help create a safe network for vulnhub

I need help creating a safe environment (lab) to safely hack vulnerable web applications without affecting my network. I have been on vulnhub, now i want to download and test my skills on vulnerable ...
user avatar
  • 1
0 votes
1 answer
63 views

Internet connection issues with new cable broadband (100/10) service, intermittently able to reach neighbor's management interface at 192.168.x.x?

I'm unfamiliar with coax broadband provisioning specifics with new (100/10) service in a residential neighborhood, and intermittently getting Internet disconnections and interestingly discovered the ...
user avatar
0 votes
0 answers
16 views

how to use a custom dns and socks5 at the same time?

So I have a program that gives me a socks5 connection 127.0.0.1:1080 (it connects to my server and creates a socks5) I want to make firefox connect to this socks5 (to use the server IP) but use a ...
user avatar
  • 1
0 votes
0 answers
24 views

Are LAA mac addresses generally more suspicious than UAA

As far as I understood LAA mac addresses are assigned by software rather than hardware and I've read that they are rather uncommon and used e.g. for resolving conflicts. Therefore I assume devices ...
user avatar
  • 1
0 votes
0 answers
20 views

Load url from CSS applied to element outside DOM

I was wondering if it's possible to kick off a network call by manipulating the style tag on an element outside the DOM (which could lead to potential SSRF if this were done server-side). I've tried a ...
user avatar
  • 349
0 votes
1 answer
32 views

SCP to create security groups in member AWS account

I'm trying to create a SCP to restrict member account users to create/modify security group(s) that have inbound rule for SSH/RDP with Source set as 0.0.0.0 or ::/0. Basically, I want users to SSH ...
user avatar
  • 525
1 vote
0 answers
34 views

How to evaluate a responsive but unknown network protocol?

I am studying CREST CPSA where the syllabus is listed here. There is a part of the syllabus which states I should know the Evaluation of responsive but unknown network applications. I find this ...
user avatar
0 votes
0 answers
82 views

Wireshark Output | [Malformed Packet: Laplink: length of contained item exceeds length of containing item] from Russian IP

While running some traces for one of our production servers, an interesting item kept popping up in our Wireshark: [Malformed Packet: Laplink: length of contained item exceeds length of containing ...
user avatar
  • 1,227
2 votes
0 answers
93 views

Windows XP SP3 2002 is not vulnerable to MS08-067

Why is my VM not vulnerable to MS08-067? There are similar question on stack exchange, yes, but they fail to specify all relevant information and so non receive a meaningful, thoughtful nor thorough ...
user avatar
0 votes
0 answers
44 views

How can a service securely update an application even when the computer's current user could be hostile

Keep in mind that I am not a security specialist or a networking specialist. I am a software developer dealing with this kind of software for the first time. Our software is used to control user ...
user avatar
4 votes
2 answers
225 views

If the connection is encrypted, is it still unsafe to login at a public network?

It's common knowledge that one shouldn't login to personal or bank accounts on public wifi such as in a starbucks or a hotel. However, assuming that the connection is HTTPS and the passwords itself ...
user avatar
0 votes
0 answers
27 views

What metadata could be stored in the IPFS network and what could be collected by modified nodes?

I'm guessing uploading to IPFS also uploads some metadata, which gets shared as well, does this assumption hold any truth? According to this only content identifiers and node identifiers are in the ...
user avatar
0 votes
0 answers
41 views

How network segmentation affects network monitoring/MITM and interconnectivity of devices

How does network segmentation affect network packet sniffing, man-in-the-middle attacks and interconnectivity of devices? I am mainly interested in understanding the possibilities of network malware ...
user avatar
  • 33
0 votes
2 answers
62 views

Is an Ethernet FTP server on a local network safe if an attacker can't access the router?

I'm having trouble understanding certain security concepts and I was wondering if someone could help me out with some questions. Imagine this setup: A home router with a very strong password, that ...
user avatar
0 votes
1 answer
56 views

What's the worse an attacker could do with anonymous FTP login? [closed]

Hypothetically speaking, if an attacker finds an anonymous FTP login what's the worse they can possibly do other than the obvious impact of gaining access to the files via FTP?
user avatar
  • 1
1 vote
1 answer
71 views

How much network noise is normal? [closed]

on my Ubuntu VPS I am getting a lot of requests and portscans from foreign sources. They are all blocked by UFW. However my question is, if this much "network noise" is normal or is my ...
user avatar
0 votes
0 answers
9 views

What is the actual use-case for Passive-Inteface on a Link-State Router compared to other forms of network security?

I am studying Networks and Routing as part of developing skills in IT and Cybersecurity, and I have learned about the Passive Interface mode for, say, OSFP. Passive Interface disables the sending of ...
user avatar
1 vote
1 answer
190 views

How can malware or a hacker penetrate a firewall from external perimeter?

How can malware or a hacker penetrate a firewall in a router/AP or a dedicated firewall without "help from the inside" (running malicious script on a computer, forgotten open ports with port ...
user avatar
  • 33
0 votes
0 answers
50 views

can hackers access a subnet in different network? [duplicate]

If I'm in my private network with my IP 192.168.4.5 and public IP 34.124.x.x, can hackers access my computer only with exploit/vulnerability (no malware) from a different network? The videos, sites ...
user avatar
1 vote
1 answer
84 views

Possible rogue admin monitoring my online activities

I teleworked for a medium-sized software company. We had a network architect who offered me a firewall to install so I could securely access on-premises resources and play around with some ...
user avatar
0 votes
0 answers
24 views

What can a malicious user do with a shared android tablet on a corporate network via connected to corp WIFI?

We are deploying android tablets with a shared pin for users in an office. If the device was stolen or in the hands of a hacker, what can a hacker do on the network (realistically)? Android does NOT ...
user avatar
0 votes
0 answers
43 views

Overlap between Wired vs WiFi vulnerabilities

This is a fundamental question, but, I'm interested in understanding the "venn diagram" of attack vectors between wired and Wi-Fi connections. What are the attacks that both wired and Wi-Fi ...
user avatar
1 vote
1 answer
131 views

Can my ISP router, which is set in bridge mode be theoretically hacked or is the risk at the router behind the "modem"?

I am using an ISP provided router in bridge mode with my own router. Where is the risk of getting hacked? Can my ISP provided router in bridge mode (=modem) be hacked? Can it get firmware updates ...
user avatar
0 votes
0 answers
59 views

Suspicious MAC address when using personal hotspot (iPhone and MacBook Air)

Personal hotspot connection from iPhone 12 used on my MacBook Air. Under Settings - Mobile Data - Personal Hotspot (iPhone), I see 2 data usage components: 1.5 GB - MacBook 20.2 KB - A suspicious MAC ...
user avatar
0 votes
0 answers
34 views

Saving sensitive data unencrypted

Problem I am currently working on a web project which makes certain API requests with the user's data. I am using the Moodle API (Moodle is a platform for school related stuff) and the WebUntis API (...
user avatar
  • 1
0 votes
1 answer
57 views

Can I safely expose a read-only RESTful API with no key or token?

As the title suggests, I would like to expose a couple of read-only endpoints without requiring a key or token. The endpoints will allow the user to request their data for the purposes of displaying ...
user avatar
  • 1
3 votes
1 answer
1k views

ARP spoofing on TCP and UDP

Statement (In Interview): ARP spoofing attacks are more effective for UDP packets rather than TCP packets since TCP establishes reliable communication channels. I have opposed the statement saying ...
user avatar
0 votes
2 answers
158 views

Is Peer-to-Peer network unsafe?

I have Computer Networking in my course work this semester. Yesterday, I learned about P2P networking. To learn more, I searched the internet and found this article online, published by The Ohio State ...
user avatar
0 votes
1 answer
47 views

If I close all ports via our firewall except for the single port used by our forex broker can I still be hacked by the broker or someone else?

we have closed all ports on our firewall except for port 5011 which is the only port that is required to be open on our server so that our server can receive price data and send buy and sell orders to ...
user avatar
0 votes
1 answer
97 views

Url only works from the browser it is generated from. Copying it into a Curl Command fails, and gives a 403 error. How can I fix this?

I am doing some web scraping for streaming files, .m3u8 mime type. In this particular instance, I can't create a functional request that does not end up with a 403 Forbidden error. How to reproduce: ...
user avatar
0 votes
1 answer
87 views

The practicality that a home network / router gets compromised

I know that it's theoretically possible that a router can be hacked, and malware can be spread throughout a network merely by being connected to it. However, I'm wondering what exactly the chances of ...
user avatar
1 vote
1 answer
34 views

Why is the authentication server needed in the Kerberos protocol

Consider the diagram in https://en.wikipedia.org/wiki/Kerberos_(protocol)#/media/File:Kerberos_protocol.svg depicting the Kerberos protocol. I'm wondering how the authentication server (AS) is useful.....
user avatar
0 votes
0 answers
48 views

Loopback source IP Spoofing

Assuming I have a service running with elevated privileges on a host, and another service is listening on a UDP port with access for everyone (0.0.0.0) is it possible to craft a spoofed UDP datagram ...
user avatar
0 votes
0 answers
42 views

What's the security implications of briefly connecting to a public wifi

Case study: Amazon Fire Stick accidently connects to a BT (UK "ISP") Open WiFi with no security. Upon connecting, the login screen of BT portal is presented, however, the user realising ...
user avatar

1
2 3 4 5
56