Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

0
votes
0answers
26 views

Arpspoof not working properly

I'm testing MITM packet manipulation on the fly between two computers on the same switch, a layer 2 switch. I'm using a Kali Linux machine as the attacker and i have written a python script to ...
0
votes
0answers
36 views

Crashing a computer connected to a server [on hold]

Back in 2015, I had a spare desktop computer that I used to solely run a Minecraft server. It was directly wired to the router and was properly port forwarded. Unfortunately, one day someone came ...
0
votes
2answers
49 views

Open ports on my NetGear router

I ran an nmap scan on my home router and I am seeing a ton of open ports. Is this normal? How do I go about closing them? $ nmap 192.168.1.1 Starting Nmap 7.70 ( https://nmap.org ) at 2019-03-16 20:...
3
votes
2answers
214 views

Does someone need to be connected to my network to sniff HTTP requests?

TL;DR Would a potential attacker need to have my Wi-Fi password and be connected to my network in order to read HTTP requests? Over the past year or so, I have made a few DIY home automation projects....
-1
votes
0answers
39 views

Any way to cache data [closed]

I am looking for a way to cache data if there is no network and resend the data out when there is network. Is there a way to do this? Preferrably with a 4g sim card with internet
1
vote
1answer
60 views

Is it safe to use Orbot with the normal Firefox browser on Android

I noticed that when using Orbots "VPN Mode" that my normal Firefox browser works fine and when I visit check.torproject.org it says I'm connected even though I'm not using the Tor Browser specifically....
0
votes
0answers
21 views

Is this type of attack possible? [duplicate]

I'm wondering if it is possible for an attacker to spoof his IP address to look like mine. For example, in Facebook's connection logs, would it be possible for an attacker to log into my account while ...
1
vote
0answers
10 views

Monitoring connected hosts in a network via hub and wireshark [migrated]

I'm trying to get all host/ips that my network is talking to, i.e. if one computer is accessing a website, I would get the websites IP, down to somebody deployed a trojan and is exfil-ing a file to ...
1
vote
0answers
25 views

Nmap showing different open ports every few seconds [duplicate]

I'm running Nmap on an Amazon Web Services EC2 instance but between runs just a couple seconds apart, I'm getting new results. Is this normal? I'm seeing open ports then they don't show. I'm running ...
0
votes
1answer
93 views

Is using simultaneously a VPN on router and another on computer any good?

I know that the use of two VPNs on a machine is generally not advised for multiple reasons (security, stability, etc.) as well explained here : Connect through two VPN clients However I was wondering ...
0
votes
1answer
45 views

What is the probability of a node going offline in practice?

Often in distributed network protocols (e.g. blockchain designs) the security of a system depends not just on how many nodes are willing to be malicious, but also how many nodes are honest-but-lazy, i....
1
vote
0answers
55 views

Loosing internet connection while connected to specific VPN server?

I have noticed a strange behaviour earlier today on my VPN on a specific server. When I run a trace route command while connected to VPN (on a specific countries server) my internet will not work for ...
3
votes
1answer
87 views

NMAP results inconsistent

I'm doing a NMAP scan that runs continuously. For some reason the results are not consistent. Sometimes it detects all the connected devices of the local network and sometimes only some of them. ...
1
vote
1answer
117 views

Is my VPN leaking or is this normal?

Hi when I am not connected to my VPN and do a route print I get one 0.0.0.0 entry in the Network Destination column. It has a gateway of 192..... When I connect to my VPN and do a route print I get ...
1
vote
1answer
89 views

Is it normal for my IPv6 to change?

My IPv6 is changing a lot, exactly three times in last three days (I saw on Microsoft's last activity), and all accounts that I keep login on my browser have disconnected. The actual IP is listed by ...
0
votes
1answer
36 views

Wifi usage and control [duplicate]

Can my messages and files either sent or received be seen by the wifi owner while am using their wifi? I am I'm some ones house and am using their wifi network for everything I do on Internet ...
0
votes
0answers
21 views

End-to-End Multihop ssh connections through chained sessions/connections [migrated]

I'm interested in forwarding opportunities of ssh (openssh), more precisely something like nested connections. As far as I understood the best way to use multihop ssh is chained tunnel, but in the ...
0
votes
2answers
81 views

What are some examples of known scenarios of network attacks?

For example, it is possible that someone could spread malware with insecure wifi access point, but I don't realize how sending a bunch of network packets can result into a compromised computer if the ...
0
votes
0answers
11 views

measuring network bandwidth during scan with iptables [migrated]

How do I account for the traffic using iptables? E.g. How can I follow how many resources scanning a single host require, in terms of network bandwidth ?
0
votes
1answer
48 views

Risk of giving untrusted IOT Device access to wifi

My issue isn't so common and I can't find an answer in the see of other IoT security issues. Let's say I have an IP cam, but I'm not even worried about someone being able to view the live stream, or ...
0
votes
0answers
28 views

How much VirtualBox device/ios emulator/blueStacks informatin can be logged/tracked by servers/ apps?

This question is intended to know if we can be tricked by Virtual devices emulators. How much logging information can servers/apps request to tell the difference? In the other word, Can we hide our ...
0
votes
0answers
40 views

Meterpreter Over HTTPS Proxy

I have a proxy server on the WAN as well as my box open to the WAN. I want this proxy server to (when it receives a shell), route it to my host so it can be the "man in the middle" between my ...
0
votes
1answer
60 views

Command injection with brace expansion

Does anyone have more experience with bash brace expansions when dealing with command injections that filters whitespaces? I am encountering most likely not a filtering engine, but an bad parsing ...
1
vote
1answer
26 views

Criteria for selecting fields and network protocols for fuzzing

I want to test a specific device connected to different networks using fuzzing. For each network interface, there are different services listening using different protocols, with open specification. ...
0
votes
0answers
54 views

IP blocking and TLS v1.3's Encrypted SNI

It is my understanding that TLS's version 1.3 would prevent censors or any other middlebox entity from knowing the SNI field and hence know what is traveling on the network, or which particular ...
0
votes
0answers
22 views

Finding how many filtered ports of a host that would be listed as “filtered” on Nmap

I just started working on nmap and was confused by this question. I'm unsure if I understood it correctly, so I appreciate your help with this. Using Nmap, find how many ports are filtered in testphp....
0
votes
0answers
26 views

Pros and cons of extending L3 to the network edge (routed access layer)?

Scenario: Greenfield network rebuild for a SMB distributed over ~10 small campuses with 1 fairly large central campus spread over ~ 100 Miles. You have almost no Cap-ex budget restriction (within ...
1
vote
1answer
55 views

Truly Disabling Session Tickets in Windows 10 Schannel

In windows 7, session tickets were disabled by disabling schannel cache, example: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL] "EventLogging"=dword:00000004 "...
0
votes
1answer
72 views

Do ISP’s in America keep IP assignment logs forever? [closed]

I read that the majority of ISP’s keep theirs for at least 180 days. However, does anyone know how long charter spectrum keeps theirs? Do ISP’s retain their logs forever even if they are using a DHCP ...
0
votes
2answers
58 views

Is AWS subnets enough for segregation of networks? or do we need VPC?

Is AWS subnets enough for segregation of networks with the all security groups? or do we need VPC to really issolate two application from each other?
4
votes
3answers
228 views

Roommate Network

I'm living with some roomies that I sort of know and occasionally I use their internet. I'm pretty computer savvy but know very little about networks. None of them are too computer savvy and I have ...
0
votes
1answer
58 views

Security auditing - disabling IP forwarding and ICMP packets redirects

I've recently started working as a security auditor and my mentor gave me some homework to write an Ubuntu security audit script so that I'll get to learn to use batch scripting and understand ...
0
votes
1answer
89 views

The Girl in the Spider's Web: SCSI hack?

In the movie, the main character is shown tapping into a network of surveillance cameras. She uses a SCSI connector which allows her to send the camera footage to a remote computer. I know it's a ...
0
votes
0answers
41 views

Windows Defender Network Protection component really aggressive, what to do?

Has anyone noticed that the Windows Defender Network Protection component (part of Exploit Guard) can be REALLY aggressive? Sometimes, in order to use a program, app or else, I need to set it to "...
1
vote
1answer
72 views

Can an unprivileged program modify an HTTP request response on the local machine?

Imagine you have a simple GET request going to server 123.456.111.222. Your client executable creates a winsock on the server IP (TCP) and sends the HTTP request (unencrypted) to the server. If a ...
-1
votes
1answer
41 views

Can I spoof a specific AP of a network?

My college wifi requires a certificate installation and also is very unreliable. Therefore, I prefer using my mobile data when I am on campus. But the college has its own app for attendance taking and ...
0
votes
1answer
103 views

Techniques used by highly sophisticated entities to snoop on VPN or SSH traffic?

It is mentioned in almost every where that very strong agencies, and governments are able to watch the online activity of the people. Aside from techniques like attacking computer networks, and ...
1
vote
2answers
455 views

How to connect a Raspberry Pi IDS to the home router to detect intrusions network wide?

I'm configuring a raspberry pi IDS/IPS with ELK stack on a separate machine, my problem is to connecting it to the router in a way it can read traffic on the whole network and drop the suspicious ...
0
votes
1answer
42 views

network icon on lock screen, group policy

In an office setting, where it is an open space design, should I ensure that the laptop has 'Do not display network selection UI', enabled? Why or why not
1
vote
0answers
38 views

UDF Client, Socket Binding and Tags Hack - Need Help [closed]

Background For a long time now, I've been working to remove a persistent, if not permanent, malware presence on my computers and phones. Every attempt at removal has been unsuccessful to date, by me ...
3
votes
2answers
183 views

Is it dangerous to connect to a public unsecure wifi network a few seconds before connecting to a vpn?

This might be common sense but I just can't seem to get it. I purchased a vpn subscription for security ( I travel a lot therefore I am dependent of public wifi networks ). I have configured all the ...
0
votes
1answer
52 views

ARP poisoning NAC

I need some help in understanding the technique of Genians/Trustwave NAC regarding ARP poisoning. As seen here Bypassing Trustwave NAC, it looks like a good method, but I don't simply get it. With ARP ...
0
votes
1answer
93 views

How are victims targeted from outer networks (WAN)

I started getting more interested about security about one year ago, and from all the things I have learned up to this day I never knew how particular victims are targeted from the attackers from ...
3
votes
1answer
86 views

How do I know that the request and response is using encryption protocols in burp suite?

I know these things can easily be done on wireshark, tshark, etc but is it possible to know that the request I forwarded and the response I received is using protocols such as TLS, TLSv1.2, TCP, HTTP, ...
0
votes
0answers
29 views

Can my work's Wifi see the video I sent through Snapchat [duplicate]

So I accidentally sent a video over Snapchat at work using my works WiFi on my own personal device. To connect to the WiFi I have to put my work user ID and password in and I’m pretty sure some ...
-1
votes
1answer
62 views

If there is a way to use insecure USB-connected devices in a secure way

This is sort of like working in a lab with toxic chemicals. There is a way to work and wear certain special clothes so you don't get contaminated. Likewise, I wonder if when dealing with malware you ...
2
votes
1answer
51 views

Where custom auth source code fits into the micro-segmentation, zero-trust architecture

So micro-segmentation seems a bit of a buzz-word, but it helps in painting the picture of how to better do security in a network. Basically from what I understand divide the network into a bunch of ...
1
vote
1answer
127 views

Secure architecture for isolated printer network

I am very new to "networking" and security, but I realize that it would be more secure to have printers on their own "isolated network". How do I secure my networked printers? What kind of printers ...
0
votes
1answer
209 views

Google Chrome Linux with Activity of Unknown Device

I've recently noticed a strange comportment on my Google Chrome Browser with GMail, where suddenly appeared a connected Unknown Device, with a double connection and with the same IP than mine, looking ...
2
votes
1answer
167 views

How to go from wifi password to computer access

In looking at What can hackers do with a wifi password?, it is said: Simply said, if someone has your Wifi password, they have full access to all connected computers and devices within your network....