Questions tagged [network]
Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].
2,878
questions
2
votes
1
answer
257
views
RC4 decryption with WEP
I just want to make sure what I know is correct about why WEP isnt secure.
When a client wants to send data to AP using WEP, the WEP key (which is the password the user uses to connect to wifi – so ...
- 23
0
votes
0
answers
52
views
How can this unelevated tool intercept VM traffic and cause a "blue screen of death" on a personal Windows 10 computer?
Because my child wanted to access certain blocked websites (such as ChatGPT), on his school computer, which runs personal Windows 10, I decided to setup a Ubuntu VM for him.
Websites are blocked by a ...
- 1,376
0
votes
0
answers
38
views
What are reliable indicators of suspicious network traffic? [duplicate]
I often see advice in discussions about malware detection that emphasizes monitoring for suspicious network traffic. Honestly, this task seems easier said than done. For example, when using tools like ...
- 43
1
vote
1
answer
21
views
What to consider when routing priviledged ports to sandboxed services? net.ipv4.conf.eth0.route_localnet=1 vs CAP_NET_BIND_SERVICE
The use case is: running isolated services, either as a hardened systemd unit file -- with close to a zero score on systemd-analyze security, or a linux container.
Both of those will place services ...
- 263
0
votes
0
answers
10
views
Can not see my own router IP in VM machine Kali linux [migrated]
I am being trying to scan my own network, I know my routers IP address is other than the one who is showing me Kali linux in the VM machine, I watch some YouTube videos and ask Ai and they say it's ...
0
votes
1
answer
26
views
Is not setting a System/User proxy for internet connections a security benefit?
Assuming you have a company network and all internet traffic is going through an http-proxy. The users have either a system proxy or a proxy set in their browser settings (i.e. through group policies)....
- 1
1
vote
1
answer
54
views
Is beneficial to have one process listing multiple ports to block country?
I have two process, one run as user client, another run as user inspector
The web app admin ( process client ) port 8080
The web app customer ( process client ) port 8081
Single app process listing ...
- 51
1
vote
1
answer
125
views
Strange non-routable IP address for my mobile phone
I have a Samsung Galaxy S21 FE, and I can't for the life of me imagine how I ended up with a non-routable IANA Reserved IP address on my mobile phone (the address is showing as 192.0.0.2). The phone ...
1
vote
0
answers
41
views
How can blockchain P2P network help in bypassing country-level whitelist network blocking? [closed]
I've seen people on the web discussing the issue of network blocking, and they were discussing that if one day a country wanted to whitelist mode (i.e. outbound traffic is blocked by default, and ...
- 11
-1
votes
1
answer
99
views
How do we secure our network traffic from packet sniffing tools [beyond TLS/SSL] [duplicate]
From following link: Decrypting TLS with Netsh/WireShark
I found its pretty easy to segregate the keys file from tcp requests and later decrypt with WireShark.
Are there any reliable/bullet-proof ...
- 107
1
vote
2
answers
47
views
Should IP behind Azure Traffic Manager be treated as private?
I was wondering should IP behind Traffic Manager treated like IP behind WAF (e.g Cloudflare). Is it okay if one were able to access that real IP directly?
- 90
0
votes
0
answers
22
views
What a Rogue AP can do? Can it intercept traffic? [duplicate]
Why a Rogue Access Point can "intercept" all traffic? Rogue AP doesn't know the shared key, so can't decrypt the traffic... So what are the dangers? What harm can a Rogue Access Point do?
- 129
1
vote
0
answers
212
views
How to diagnose a DDOS on a home network?
I'm a user with a consumer level modem and a plain wifi router.
I have been seeing activity where for long periods of time over night, my internet connection will shut off for 10-20 minutes at a time. ...
- 202
1
vote
1
answer
107
views
How can I prevent ISP DNS snooping when using piHole [duplicate]
I have home network set up to use piHole and piHole uses 1.1.1.1 and 8.8.8.8 as DNS resolvers. This, however, doesn't prevent ISP snooping on my DNS traffic, as DNS traffic is UDP unencrypted, as I ...
- 43
2
votes
1
answer
120
views
What are the infection risks for a SMB/Samba file share from an infected client PC?
I have a PC on my home network that I consider potentially infected by exposure to an untrusted program from the internet. (Antivirus detected nothing, and the PC runs fine, but I'm choosing to err on ...
- 23
2
votes
0
answers
85
views
Why is IPsec transport mode "vulnerable" for not having integrity of variable fields? Why is this so important?
With IPsec transport mode we CAN'T have integrity of variable fields (eg TTL and checksum).
Why is it a problem? Is it? What could be the attack?
I think TTL expire or checksum modification (so both ...
- 129
0
votes
0
answers
133
views
Cannot exploit Metasploitable 2 VM using Tomcat 5.5 on Metasploit with Parrot OS
I've being trying to perform a simple exploit with msfconsole on Metasploitable 2 without any results.
I'm using a host-only network adapter with DHCP enabled so I'm getting 192.168.56.104 on the ...
0
votes
1
answer
81
views
Why would an application I've never used show up on my NAT sessions? [closed]
I was looking through my session logs and I see that Snapchat shows up. I don't use Snapchat. Never have. It's not a website I've ever even visited. The host for the session is the computer I'm on now,...
6
votes
4
answers
5k
views
Will installing a kernel mode driver onto a PC compromise the entire network it's connected to?
At home, my personal PC and work computers all connect to the same network, via ethernet and WiFi.
A video game on my personal PC is requiring an install of a "kernel mode driver." At the ...
- 201
25
votes
4
answers
10k
views
Should I be worried about unusual SSH login attempts from unknown IP addresses?
I've been monitoring my server's SSH logs and noticed a steady stream of login attempts from unknown IP addresses, mostly from different countries.
Heaps and heaps of account names are tried, and with ...
- 1,376
1
vote
1
answer
95
views
Comprehensive endpoint network-layer security
I'm not sure what the exact verbiage is to describe what I'm looking for so forgive me. But I'm looking for a solution for a small-ish office (think ~25-50 person SMB). The staff use laptops and those ...
- 194
2
votes
0
answers
62
views
What can an attacker with root access on a GKE node do on the network?
Let’s say that an attacker, through some chain of exploits, manages to get root on a Kubernetes node. Can they disable network policies on that node? I know that to a large extent this depends on the ...
- 141
0
votes
0
answers
53
views
Preserving network segmentation for cloud web app in a user friendly way
Assuming a team maintaining multiple simple cloud web apps with associated secret key stores.
The control plane for the app needs to access secrets, and we don't want to expose the secret store on the ...
- 101
0
votes
0
answers
78
views
Is Windows 10 'Backup and Restore' sending my password in plaintext on unencryped link?
[Note: I have a Windows 10 system in an air-gapped network as the only computer on the network where it is the acting "server", as part of an RMF-compliant, DAAPM (link to PDF on dcsa.mil) ...
0
votes
2
answers
152
views
Is it possible to send data from an open-source program but make it impossible for a user with source code to do the same?
If I want to store a global scoreboard for a game running locally on the user's computer and I want to make sure that all the requests coming to the server are really generated by the game and not ...
- 135
0
votes
1
answer
174
views
Metasploit Payloads from outside the local network [duplicate]
I created a payload with metasploit and hacked my other computer.
But this only works within the local network, right?
I would like to know how hackers create payloads that work on targets outside the ...
0
votes
0
answers
64
views
Is there an established way to classify network services by risk level?
I noticed that I seem to think of network services in three categories wrt the risk of exposing one to the internet (or a hostile network):
"Low risk" services are extensively hardened. If ...
- 4,951
0
votes
2
answers
139
views
Is a MITM attack possible for my apt repo?
OS is Debian. Imagine I have my own apt repo set up inside a private network.
This repo is set up to provide a single package to other servers on this network.
I can easily create a signing key for my ...
- 101
0
votes
1
answer
98
views
Our server in a our client's network - What possible attacks are there?
I apologise in advance for this question being very sparse in details and sounding rather hypothetical, reasons for this are hopefully explained below. I am not a security expert, but I am in a ...
- 1
0
votes
1
answer
146
views
How to prevent spam attacks from rotating proxies
My website has hundreds of thousands of html pages that are open to public. Each time a html page is requested, a call will be made to my database to get the correct data. Therefore the cost of each ...
- 1
0
votes
3
answers
135
views
Network knowledge in malware analysis
I asked an experienced person about the needs of malware analysis. He told me:
"Learn x86, C/C++, Win32 API, Windows internals, PE file structure basics... Then when you are comfortable with ...
1
vote
2
answers
205
views
If I did MAC filtering whitelist, what will happen with devices that weren’t add to list?
In my home WIFI router, I set MAC filtering for me and my family’s devices (about 6 devices).
If some devices that weren’t in my MAC filtering whitelist, and they know my WIFI password and try to ...
- 11
0
votes
0
answers
241
views
Router level SSL Inspection
Is there any way I could inspect the traffic from an untrusted device connected to my network? I would like to get a router that has ssl inspection capabilities, where I could check the https packets ...
- 1
1
vote
0
answers
94
views
Is it possible to securely use a remote service in a completely hostile network environment
A worldbuilding technical question!
I am an extremely evil power-mongering country government. There is a company S under my jurisdiction, physically located completely inside the borders. This ...
- 119
1
vote
0
answers
117
views
Needing information on cyberattack that occured [closed]
If someone hacks into your WiFi and comes through an unlocked networked and knows your password and IP address and learns the specs on all your devices, the computer and cellphones, the smart TV, are ...
- 11
1
vote
0
answers
143
views
WEP .pcap example, need help finding one [closed]
I first wanted to simulate a WEP wi-fi network using virtual machines and then intercept data/crack it but it seems that I need actual wireless interfaces which I do not have and using my own in my ...
- 11
1
vote
1
answer
130
views
How to know if a device comes into my WiFi network range even though it does not connect to my network [closed]
How to know if a device comes into my WiFi network range even though it does not connect to my network?
Here my business model is that when someone comes into my Wi-Fi range if I can know the count of ...
0
votes
1
answer
263
views
How to isolate VMs with internet exposed websites on my home network?
I want to host some websites served from an isolated VM which is on my home network through port forwarding.
Although I believe this is reasonably safe, I want to physically segment internet-exposed ...
0
votes
0
answers
167
views
MITM with forwarding between 2 hosts in the same network
I have 3 hosts in the same network, let's say their IP addresses end with:
.10 (Host A)
.11 (Host B)
.12 (Host C)
I want to sniff packets between A and C through host B, so that host B acts as MITM.
...
- 11
0
votes
0
answers
104
views
Can I setup and enforce additional WiFi connection (and password) requirements on managed laptops using Windows or MacOS?
Can I setup and enforce additional WiFi connection (and password) requirements on managed laptops using Windows or MacOS?
Such as:
blocking (or entirely hiding) the option to connect to open networks
...
- 6,745
1
vote
0
answers
468
views
Using Android Wireless Hotspot while connected to Hotel internet via VPN
I want to make sure I understand the security implications of this scenario:
I am staying in a hotel.
I have a VPN on my android phone.
I connect to the hotel's unencrypted WiFi network with the ...
- 648
0
votes
0
answers
81
views
Is it possible to count SYN and ACK flags separately in a single rule in Snort?
I want to write a rule for Snort to detect lost traffic in the network. Is it possible to write a rule that, by combining two flags, SYN and ACK, it declares that if the number of SYNs to the server ...
0
votes
3
answers
759
views
Why do most VPN protocols work on the Transport Layer and not on the Network Layer instead?
In both the TCP/IP model and the OSI model, IPSEC offers encryption on the Network Layer (IP), while other VPN protocols such as OpenVPN offer it on the Transport Layer (TCP).
Due to encapsulation ...
- 6,745
3
votes
2
answers
605
views
Decrypting network traffic and finding HTTPS private key
I've been battling with one school task for couple days and can't seem to find any idea how to solve it. The task is pretty simple:
Log in to the server using SSH. The answer to the task is in ...
- 95
2
votes
2
answers
235
views
Firewall to allow responses but block new connections
I wonder if a firewall can support this case. There are two servers: A and B.
A can send a request via an open port to B and B must respond to A during this connection.
B cannot send a request on its ...
- 123
0
votes
1
answer
514
views
Setting up Burpsuite with a machine in another network
I'm currently testing a mobile app (suppose it communicates with the domain blablabla.net).
For the purposes of testing this app, I've set up an android machine on another netowrk, and I'm currently ...
- 3
0
votes
0
answers
97
views
Could a public IP with blocked public inbound/outbound traffic be a risk?
If we have a device that for some reason needs a public IP address and if at the same time the device should only be accessible from within a private network: Could the fact that the public IP of the ...
- 101
1
vote
0
answers
101
views
can I make my home network look like my work network [closed]
We have to sign in and out using the school's network. I have the ssid and the password and the ip addresses. Is there a way to use my home network and make them think I am using the school's network? ...
- 11
2
votes
1
answer
582
views
What information is contained in the local SAM in an Active Directory network
I'm curious in an enterprise network running Windows, what information is available in the SAM of a standard user's endpoint machine?
I understand (and correct me if I'm wrong) that when logging in to ...
- 303
1
vote
1
answer
331
views
Why is TLS communication within a VPC important? [duplicate]
In this sense, I understand the encryption needed between say client and server and all communications that are external.
But for a scenario where for all VMs are in the same VPC and not exposed to ...
- 113