-2
votes
0answers
14 views

Can ping the ip-Address but not the site and neither browse to it [migrated]

Due to some malware or virus, I was unable to connect to any site while the connection showed "Internet Access". On experimenting, I found that I was able to ping the I.P. address of google. But when ...
1
vote
3answers
135 views

Are there any exploits that would allow a user to “spoof” a screen capture system?

We have a security system installed that takes pictures of the client user's screen and sends them to a server. The pictures are saved until they get to the point where they are old enough to be ...
2
votes
3answers
342 views

Watching for applications like WireShark and other eaves dropping on corporate network

Are there ways to monitor and check for network monitoring like WireShark? Or would it just be more ideal to ensure every application uses SSL to ensure no employee or anyone could packet sniff ...
1
vote
2answers
207 views

Why are Windows computers open to network file access by default?

I'm on a work network, and I had some files I wanted to give to a collegue. I set up a shared folder and directed him to my computer name to open the shared folder. Then I remembered from a long time ...
1
vote
5answers
176 views

“Safe” public WiFi [duplicate]

Is there any danger of any of my computer's files being read or changed (mainly - infected by malware) in the following scenario (I'm using Windows 7): I have file sharing turned off (in "advanced ...
0
votes
1answer
94 views

How can an out-of-the-box (Windows) server not be secure? [closed]

Background: I'm considering switching from shared web hosting to VPS for added security. However - managed VPS's costs much more than unmanaged ones. So, assuming: I secured my website against any ...
3
votes
3answers
640 views

What risks are involved in exposing our home computers over the public internet?

I'm currently running a webserver from home accessible on the public internet via a static IP. Exactly what kind of risk is there in doing so? From what I understand, the setup will not allow ...
-4
votes
1answer
243 views

How to prevent malware infection and file accessibility through a wireless router? [duplicate]

The answer suggested in the 'duplicate' is about a different issue. But since my original wording of the question seems to have not been clear - here's a second attempt: Is there any danger of any of ...
-5
votes
4answers
347 views

How can I use linux and disguise myself as a windows computer over a LAN? [closed]

My computer is currently running windows XP on a LAN Network. I'd like to use linux but I want to hide myself. I don't want to be the only linux system on a network full of windows XP computers. Is ...
5
votes
1answer
136 views

User Account Control and outside processes

I was using TeamViewer (a remote desktop client) to log in to a remote computer running Windows 7. While logged in, the Java updater prompted me for administrator access to run an update check. Out ...
1
vote
1answer
255 views

Using a Web Server to steal NTLM credentials

I am trying to design an attack vector against an organization in which the pen tester (myself), steals NTLM credentials through HTTP. I am thinking of these scenarios: 1- I set up a web server on my ...
3
votes
4answers
474 views

Is it possible to catch a virus on my LAN without clicking on anything?

My unpatched PC running Windows is connected to a network which contains other "infected" computers, can I get infected by viruses without any interaction on my part?
-2
votes
1answer
111 views

Why should I use the VPN? [closed]

Does a Virtual Private Network (VPN) provide an encrypted connection from outside networks or from ISPs to the internal network?
0
votes
3answers
606 views

How to hide local network traffic on my computer?

I want to hide any traffic an application makes on the local network, make it look like the network is completely quiet to the system and other monitoring software. Is this doable? How would I ...
5
votes
3answers
2k views

Need a software that can monitor and log network traffic of installed applications [closed]

I need to monitor and log network activities of a specific software installed on my system. I know there are lots of network monitoring software out there, even system explorer has one built in. I ...
-1
votes
1answer
486 views

Can File Sharing being Controlled by Mac Address? [closed]

I am currently setting up secure environment between 2 pc in isolated network. Just wondering can we do file sharing based on that pc mac address instead of username? The environment is OEM Windows ...
2
votes
3answers
770 views

Identify a process that uploads data

I am using the tool "Internet Traffic Agent" to monitor my in- and outbound traffic. It shows me clearly that over a period of approx. an hour, some process on my machine is uploading data, about ...
0
votes
1answer
157 views

Windows Firewall accepts a three-second unicast response from any source

I have read this article but still has some doubts may be after that... The Windows Firewall feature in Microsoft Windows XP Service Pack 2 (SP 2) accepts a three-second unicast response from ...
0
votes
2answers
134 views

Setting up a remote test environment correctly

My setup: - Main Box (connected to network) - VM1 : Linux - VM2 : Windows 7 Both the VMs are running off VM Player and using Bridged: connected directly to the physical network and replicating ...
1
vote
1answer
1k views

How to view which mac addresses are connected to some AP?

I set up an open AP. I know I can view mac addresses of connected users via AP's console (local console). this is not what I need. I use tool like Netstumbler or inSSIDer on my Win 7 machine to see ...
2
votes
2answers
1k views

how to identify p2p on network

Im trying to work out if the traffic in the below image is P2P file sharing? If you notice the source ports are all random but the time 17.24 from c.port 58338 runs for a good length maybe about 400 ...
1
vote
1answer
543 views

How to fix the audit failure in our web server

We noticed that we are getting the following audit failure logs in our web server. The workstation is not in our network. Can anybody help me how to isolate and prevent this from happening? An ...
29
votes
1answer
2k views

What's the risk if I accidently type my password into a username field (Windows logon)?

I'm used to logging into my personal Mac which is a password-only field (like waking from sleep mode). Sometimes I have to use a Windows network on which I have an account, but of course I have to ...
4
votes
5answers
4k views

Preferred UAC configuration in Enterprises that use Login scripts to map drives

In Windows 7, Vista and newer OS's, UAC will prevent logon scripts from mapping hard drives so that the following logon script code won't work: Dim WshNetwork Set WshNetwork = ...
5
votes
4answers
6k views

Secure use of psexec or better alternative to it

I want to remotely start VMWare virtual machines (I own VMWare Workstation) and to this end I need to execute on host something like "vmrun -T ws H:\VMWare\VM1\VM1.vmx nogui" with user desktop ...
2
votes
1answer
110 views

Network abnormally slow during night hours

My network recently the last week as become abnormally slow around 11 pm. Very slow buffering youtube videos during all hours. Ive recently purchased the new router about two months ago but not ...
5
votes
2answers
2k views

Is opening port 3389 on a router and forwarding this to a Windows SBS 2003 server secure?

I know of a company who has port 3389 open on their router and forwards this to a Windows SBS 2003 server. The server has the Windows firewall switched on, is patched and has an up to date antivirus ...
2
votes
2answers
2k views

Is CIFS/SMB (Folder Sharing in Windows) secure?

I have to back up some data from windows 7 machines over the internet, and I rarely use windows so am distrustful of it in general. Specifically: Is there any sort of check that the server is the ...
2
votes
1answer
168 views

Are COMET installations immune to “Slow TCP Reading” DoS on Windows? (Such as SignalR or WebSync)

My understanding is that COMET implementations of WebSync and SignalR do not directly use IIS and are a few layers lower on the ISO model. After reading Qualys's blog regarding slow TCP reading, I ...
1
vote
1answer
181 views

Can accounts still be logged onto if Password Caching is not enabled?

This is kind of an extension of my other question.. If you were not storing any of the passwords locally (caching disabled), would a user some how still be able to circumvent around this security ...
2
votes
1answer
230 views

Running Untrusted Software on Local Network

So I need to run a bit of software on my local network that I just have the .exe for. The caveat is: The software needs access to the internet to produce a bunch of files. I need to access those ...
7
votes
3answers
6k views

How do I ensure data encryption on Samba transmission on *NIX systems?

I have a heterogeneous system (both MS and *nix) that communicates with CIFS/SMB. How can I ensure proper data encryption at the application layer?
5
votes
1answer
723 views

I'm having a DDoS attack, my hosting company is stupid, and I need to know what is hapening

So ok, right now my windows 2003 dedicated server is under attack by some guy who's flooding UDP packets (~90.000 packets/sec) on my 100Mbps server for the last 8 hours. I'm on a shared port, so I'm ...
1
vote
1answer
528 views

Should Windows 2008 R2 be used as an externally facing DNS name server?

When compared to more traditional DNS name servers, what are the benefits / drawbacks of using a Windows 2008 R2 as a public ns record for a company. What limitations, or security issues would I ...
0
votes
1answer
96 views

Windows network specific attacks

I have limited experience with Windows networks and certainly no experience with AD forests or anything related. I have experience and understanding how to secure and maintain a unix style network. ...
5
votes
1answer
223 views

Secure access to a Microsoft Access Database

I have a server set up with medical files in a Access database. I am taking over this job from an existing guy who has vanished, so I don't know all the details of the system. I can find out specific ...
5
votes
2answers
551 views

What are the risks associated with relying on IPSec IP Filtering?

When using Windows IPSec for IP filtering whenever a filter is added you need to have a "mirror" rule (by checking the "Mirrored. Match packets..." tickbox). Because IPSec Filtering is not stateful, ...
9
votes
4answers
666 views

A firewall without any extra features [closed]

I have Kaspersky Internet Security (KIS) installed on my system. I always keep it disabled, yet using a few practices, I kept my system virus free for years: I disabled autorun using these tricks; I ...
6
votes
2answers
371 views

What features do you look for in an Enterprise Log Management solution?

This question is for IT Pros, and people who manage a company's infrastructure. Developers should see this related answer for tools geared for them. What are your requirements for such a Event Log ...