Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
-1 votes
0 answers
64 views

Is it possible that Anti-Cybercrime Police catch and track DDOS black service buyer? [closed]

Is it possible that Anti-Cybercrime Police catch and track DDOS black service buyer? My IP is being attacked for years (DDOS) from IPs and IP ranges from hundreds of different IPs. The story is: I ...
Frost's user avatar
  • 1
2 votes
0 answers
61 views

Why is IPsec transport mode "vulnerable" for not having integrity of variable fields? Why is this so important?

With IPsec transport mode we CAN'T have integrity of variable fields (eg TTL and checksum). Why is it a problem? Is it? What could be the attack? I think TTL expire or checksum modification (so both ...
allexj's user avatar
  • 21
0 votes
0 answers
39 views

Cannot exploit Metasploitable 2 VM using Tomcat 5.5 on Metasploit with Parrot OS

I've being trying to perform a simple exploit with msfconsole on Metasploitable 2 without any results. I'm using a host-only network adapter with DHCP enabled so I'm getting 192.168.56.104 on the ...
Martin Montas's user avatar
0 votes
1 answer
49 views

Why would an application I've never used show up on my NAT sessions? [closed]

I was looking through my session logs and I see that Snapchat shows up. I don't use Snapchat. Never have. It's not a website I've ever even visited. The host for the session is the computer I'm on now,...
captainentropy's user avatar
6 votes
4 answers
5k views

Will installing a kernel mode driver onto a PC compromise the entire network it's connected to?

At home, my personal PC and work computers all connect to the same network, via ethernet and WiFi. A video game on my personal PC is requiring an install of a "kernel mode driver." At the ...
HC_'s user avatar
  • 201
24 votes
5 answers
9k views

Should I be worried about unusual SSH login attempts from unknown IP addresses?

I've been monitoring my server's SSH logs and noticed a steady stream of login attempts from unknown IP addresses, mostly from different countries. Heaps and heaps of account names are tried, and with ...
security_paranoid's user avatar
0 votes
0 answers
14 views

Linux automated SMB connection attempts: has my server been compromised [migrated]

We have a Linux server running CentOS7. A few days ago we found out that it has started continuously attempting to connect to a Windows server share via port 445 using a certain user's AD credentials. ...
swami's user avatar
  • 101
1 vote
1 answer
85 views

Comprehensive endpoint network-layer security

I'm not sure what the exact verbiage is to describe what I'm looking for so forgive me. But I'm looking for a solution for a small-ish office (think ~25-50 person SMB). The staff use laptops and those ...
Harv's user avatar
  • 194
1 vote
0 answers
39 views

What can an attacker with root access on a GKE node do on the network?

Let’s say that an attacker, through some chain of exploits, manages to get root on a Kubernetes node. Can they disable network policies on that node? I know that to a large extent this depends on the ...
Neil Madden's user avatar
0 votes
0 answers
43 views

Preserving network segmentation for cloud web app in a user friendly way

Assuming a team maintaining multiple simple cloud web apps with associated secret key stores. The control plane for the app needs to access secrets, and we don't want to expose the secret store on the ...
Petter Kvalvaag's user avatar
0 votes
0 answers
67 views

Is Windows 10 'Backup and Restore' sending my password in plaintext on unencryped link?

[Note: I have a Windows 10 system in an air-gapped network as the only computer on the network where it is the acting "server", as part of an RMF-compliant, DAAPM (link to PDF on dcsa.mil) ...
SeligkeitIstInGott's user avatar
0 votes
2 answers
142 views

Is it possible to send data from an open-source program but make it impossible for a user with source code to do the same?

If I want to store a global scoreboard for a game running locally on the user's computer and I want to make sure that all the requests coming to the server are really generated by the game and not ...
Reverent Lapwing's user avatar
0 votes
1 answer
55 views

Metasploit Payloads from outside the local network [duplicate]

I created a payload with metasploit and hacked my other computer. But this only works within the local network, right? I would like to know how hackers create payloads that work on targets outside the ...
Bruno Jaquinto's user avatar
0 votes
0 answers
55 views

Is there an established way to classify network services by risk level?

I noticed that I seem to think of network services in three categories wrt the risk of exposing one to the internet (or a hostile network): "Low risk" services are extensively hardened. If ...
Quitting Due To Antisemitism's user avatar
0 votes
2 answers
105 views

Is a MITM attack possible for my apt repo?

OS is Debian. Imagine I have my own apt repo set up inside a private network. This repo is set up to provide a single package to other servers on this network. I can easily create a signing key for my ...
cat pants's user avatar
  • 101
0 votes
1 answer
85 views

Our server in a our client's network - What possible attacks are there?

I apologise in advance for this question being very sparse in details and sounding rather hypothetical, reasons for this are hopefully explained below. I am not a security expert, but I am in a ...
Aukksi's user avatar
  • 1
0 votes
1 answer
103 views

How to prevent spam attacks from rotating proxies

My website has hundreds of thousands of html pages that are open to public. Each time a html page is requested, a call will be made to my database to get the correct data. Therefore the cost of each ...
Tuan Do's user avatar
0 votes
3 answers
106 views

Network knowledge in malware analysis

I asked an experienced person about the needs of malware analysis. He told me: "Learn x86, C/C++, Win32 API, Windows internals, PE file structure basics... Then when you are comfortable with ...
Moha Mohai's user avatar
1 vote
2 answers
121 views

If I did MAC filtering whitelist, what will happen with devices that weren’t add to list?

In my home WIFI router, I set MAC filtering for me and my family’s devices (about 6 devices). If some devices that weren’t in my MAC filtering whitelist, and they know my WIFI password and try to ...
Zensu TESUTO's user avatar
0 votes
0 answers
176 views

Router level SSL Inspection

Is there any way I could inspect the traffic from an untrusted device connected to my network? I would like to get a router that has ssl inspection capabilities, where I could check the https packets ...
Paul's user avatar
  • 1
0 votes
0 answers
84 views

Is it possible to securely use a remote service in a completely hostile network environment

A worldbuilding technical question! I am an extremely evil power-mongering country government. There is a company S under my jurisdiction, physically located completely inside the borders. This ...
hijarian's user avatar
  • 109
1 vote
0 answers
109 views

Needing information on cyberattack that occured [closed]

If someone hacks into your WiFi and comes through an unlocked networked and knows your password and IP address and learns the specs on all your devices, the computer and cellphones, the smart TV, are ...
Larry Lesser's user avatar
1 vote
0 answers
110 views

WEP .pcap example, need help finding one [closed]

I first wanted to simulate a WEP wi-fi network using virtual machines and then intercept data/crack it but it seems that I need actual wireless interfaces which I do not have and using my own in my ...
Anthony's user avatar
  • 11
1 vote
1 answer
122 views

How to know if a device comes into my WiFi network range even though it does not connect to my network [closed]

How to know if a device comes into my WiFi network range even though it does not connect to my network? Here my business model is that when someone comes into my Wi-Fi range if I can know the count of ...
Bharadwaj Manne's user avatar
0 votes
1 answer
197 views

How to isolate VMs with internet exposed websites on my home network?

I want to host some websites served from an isolated VM which is on my home network through port forwarding. Although I believe this is reasonably safe, I want to physically segment internet-exposed ...
aughhhhhhh's user avatar
0 votes
0 answers
136 views

MITM with forwarding between 2 hosts in the same network

I have 3 hosts in the same network, let's say their IP addresses end with: .10 (Host A) .11 (Host B) .12 (Host C) I want to sniff packets between A and C through host B, so that host B acts as MITM. ...
SempriGno's user avatar
0 votes
0 answers
95 views

Can I setup and enforce additional WiFi connection (and password) requirements on managed laptops using Windows or MacOS?

Can I setup and enforce additional WiFi connection (and password) requirements on managed laptops using Windows or MacOS? Such as: blocking (or entirely hiding) the option to connect to open networks ...
Bob Ortiz's user avatar
  • 6,665
1 vote
0 answers
250 views

Using Android Wireless Hotspot while connected to Hotel internet via VPN

I want to make sure I understand the security implications of this scenario: I am staying in a hotel. I have a VPN on my android phone. I connect to the hotel's unencrypted WiFi network with the ...
stochastic's user avatar
0 votes
0 answers
69 views

Is it possible to count SYN and ACK flags separately in a single rule in Snort?

I want to write a rule for Snort to detect lost traffic in the network. Is it possible to write a rule that, by combining two flags, SYN and ACK, it declares that if the number of SYNs to the server ...
user16385455's user avatar
0 votes
3 answers
489 views

Why do most VPN protocols work on the Transport Layer and not on the Network Layer instead?

In both the TCP/IP model and the OSI model, IPSEC offers encryption on the Network Layer (IP), while other VPN protocols such as OpenVPN offer it on the Transport Layer (TCP). Due to encapsulation ...
Bob Ortiz's user avatar
  • 6,665
3 votes
2 answers
529 views

Decrypting network traffic and finding HTTPS private key

I've been battling with one school task for couple days and can't seem to find any idea how to solve it. The task is pretty simple: Log in to the server using SSH. The answer to the task is in ...
Paul's user avatar
  • 95
2 votes
2 answers
166 views

Firewall to allow responses but block new connections

I wonder if a firewall can support this case. There are two servers: A and B. A can send a request via an open port to B and B must respond to A during this connection. B cannot send a request on its ...
Bằng Rikimaru's user avatar
0 votes
1 answer
310 views

Setting up Burpsuite with a machine in another network

I'm currently testing a mobile app (suppose it communicates with the domain blablabla.net). For the purposes of testing this app, I've set up an android machine on another netowrk, and I'm currently ...
sag0li's user avatar
  • 3
0 votes
0 answers
91 views

Could a public IP with blocked public inbound/outbound traffic be a risk?

If we have a device that for some reason needs a public IP address and if at the same time the device should only be accessible from within a private network: Could the fact that the public IP of the ...
Moritz Loritz's user avatar
1 vote
0 answers
97 views

can I make my home network look like my work network [closed]

We have to sign in and out using the school's network. I have the ssid and the password and the ip addresses. Is there a way to use my home network and make them think I am using the school's network? ...
Saif Alain's user avatar
1 vote
1 answer
295 views

What information is contained in the local SAM in an Active Directory network

I'm curious in an enterprise network running Windows, what information is available in the SAM of a standard user's endpoint machine? I understand (and correct me if I'm wrong) that when logging in to ...
user2334659's user avatar
1 vote
1 answer
205 views

Why is TLS communication within a VPC important? [duplicate]

In this sense, I understand the encryption needed between say client and server and all communications that are external. But for a scenario where for all VMs are in the same VPC and not exposed to ...
Vipin Menon's user avatar
0 votes
0 answers
167 views

How do hackers hack into private network device? [duplicate]

As a picture show above, how do hackers use PC0 to hack into PC1? They are in different private network. As far as I know, we can use VPN to communicate two different private networks, so do hackers ...
甚麼甚's user avatar
0 votes
0 answers
106 views

How can I forward and capture all traffic from a device (mobile, or PC) from another network?

Let's say Mobile device A sits on Network A, and I want to monitor their HTTPS traffic remotely, how might I go about doing this? I know that locally, on the same network, a proxy debugging tool can ...
ThanoojJ's user avatar
2 votes
1 answer
1k views

How dangerous is sharing a WiFi network with neighbors?

Context. I am moving in to a building where neighbors share WiFi. There are several routers connected with each other, and residents connect to one of the WiFi networks. I was told it's cheaper that ...
Shelerra's user avatar
0 votes
0 answers
117 views

Are there security risks with using someone else's ISP?

I recently found out that, due to a mix-up at Australia's National Broadband Network, the connection to our Internet Service Provider had been swapped with a neighbour's. It doesn't look like the ...
user200783's user avatar
0 votes
0 answers
88 views

Specific station not showing up on airmon-ng though there are two devices connected

I'm on a mac using kali linux. Why aren't any specific devices showing up despite two devices currently using the wifi?
loki's user avatar
  • 1
0 votes
0 answers
178 views

How can I verify that my DoS attack is effective?

I was trying to simulate a DoS attack on the CORE network emulator using hping3 (Ubuntu). The topology is like three PCs connected by a router. The client's IP is 10.0.0.20/24, The server's IP is 10.0....
Harsha Gangari's user avatar
1 vote
0 answers
168 views

NMAP sending ARP request to destination IP instead of default gateway [closed]

I am doing an NMAP port scan to a remote IP present in a different subnet. NMAP initiates an ARP request first to the remote IP instead of the default gateway(even if the ARP entry is present in the ...
Shaim Khanusiya's user avatar
1 vote
1 answer
780 views

Can kubernetes pods in the same or different namespace sniff the packets of other pods?

Since the pods share the same subnet, is it possible that one pod can sniff the network packets of other pods? Please explain the reason. Note: I created 3 pods in the same namespace, on one pod I ran ...
warrior-oo7's user avatar
0 votes
0 answers
155 views

Impact of Deep Learning Based Flow Correlation on Tor

It's been known ever since Tor existed that flow correlation attacks can break Tor's anonymity, but whereas in the past flow correlation attacks had a false positive rate far too high to be useful ...
DeepPSNA's user avatar
0 votes
2 answers
129 views

Encryption on IP Tables network Gateway

I have created a network gateway on an Ubuntu server. It has 2 interfaces and forwards the traffic from one interface to another. One of the interfaces is connected with a pfsense firewall that ...
Kostas's user avatar
  • 1
0 votes
1 answer
120 views

Looking at internal ports through netstat command [closed]

I have a connection to another machine and was looking at which ports are open internally and which ports are open on all interfaces, I ran the following netstat command to achieve this netstat -ano ...
Just.a.tech's user avatar
1 vote
2 answers
200 views

Recommended temporary key size for communication

What I'm going to do is use AES-256 encrypted network communication to agree upon a pseudo-random key for further communications between two peers, so that every "session" utilizes a ...
R-Rothrock's user avatar
1 vote
1 answer
763 views

Where are wifi passwords stored? [duplicate]

I'm looking for technical details on how Windows, Linux, and macOS all store the SSIDs and passwords for every wireless network you've ever connected to. I've tried searching for this, but my Google-...
Wes Sayeed's user avatar

1
2 3 4 5
58