Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

8
votes
3answers
480 views

Can an attacker “simulate” a private IP address?

I have a SSH server with a rule that does not allow password connections outside the local network. So people already on the local network, either physically or via VPN, are allowed to connect with ...
20
votes
8answers
4k views

Is possible to get infected by only staying connected to the Internet (nothing else)?

I have a router and I'm the only user. I have a computer with Linux and a tablet with Windows 8.1. Because of a few problems, I had to reinstall Windows on the tablet. Since I'm a bit paranoid about ...
0
votes
1answer
95 views

WEP password cracking

I was testing WEP password cracking on my router. I had set a thirteen character password ("TESTING123456") and tried these commands: airmon-ng start wlan0 Then i started airodump-ng using this ...
0
votes
3answers
45 views

Why is shared less secure than open when it comes to WEP?

According to this post, Jeffrey Tippet (Microsoft employee) writes: WEP can run in two modes: shared and open. Despite the names, shared is actually less secure than open. Because of this, our ...
1
vote
1answer
28 views

Padding of 802.11 packet with 0's in libpcap [on hold]

I am trying to send probe request to Access Points.But whenever I send a probe request packet it is padded with 0's i.e I see two packets on wireshark for every packet I send : a non-padded packet and ...
2
votes
1answer
218 views

Snort even though working properly does not report majority of rules

I have installed Snort 2.9.7.0 and it does not detect majority of attacks, such as nmap port scans, downloading exe files, opening documents containing keyword "root". I use Snort together with ...
3
votes
2answers
462 views

How to know if I'm under a MITM attack

If I am connected in a public WiFi, is there any way to know whether I am under attack or not while browsing sites using SSL? For example, if I visit facebook.com and the URL starts with "https://", ...
3
votes
3answers
718 views

Enumerate the subdomains of a given domain - what's the point?

There're a number of security tools out there that enumerate the subdomains of a given domain. I wonder: What's the purpose of that in terms of security / hacking? Is there any way to do that other ...
-1
votes
2answers
66 views

Client misunderstanding nmap [on hold]

My client wants their public facing IP addresses to be secure, but thinks that running nmap port scans will draw attention from hackers. To settle this once and for all, what do you say?
1
vote
2answers
80 views

Cheap and efficient strategy to protect against professional attack?

With things like NSA or state sponsored attack, it seems that no one is safe from a technical point of view. Is there any efficient method or strategy to protect against them? My guess is that ...
-3
votes
1answer
23 views

Protection of information terminal running Windows OS [on hold]

I need an information computer terminal to work 24/7 in a protected public area. Operating system is Windows POSReady 7 EVAL. I need this terminal to send HTTP messages to a single IP address in the ...
0
votes
1answer
13 views

Security risks for a simple network configuration screen in android [on hold]

I am building an Android App that pulls chart information from a server where the connection is specified on this view Ideally, the end user will put in a valid host and port resulting in business ...
1
vote
1answer
108 views

Is it there any effective way to prevent shodan to access my webcams [duplicate]

Recently while browsing using shodan, I came across a search string to explore webcams. Some of the searches I carried out were: webcamxp city:city name webcamxp geo: longitude and latitude ...
2
votes
0answers
16 views

Cuckoo with pfSense [migrated]

I am trying to set up Cuckoo with pfSense, and it is either not getting the information from the Cuckoo server, or it is not correctly sending the info back to the result server. I am using a LAN ...
0
votes
0answers
76 views

How 'private' is my setup?

I'm currently running QubesOS (so essentially a virtualized Fedora operating system), which I use to access an offshore VPS through I2P (using garliccat). I then route all my traffic through the VPS ...
-1
votes
0answers
67 views

Is This A Run32dll.exe Virus [migrated]

I have two run32dll.exe processes, one in System32 and another in SysWOW64. Is one of them a virus or is it normal? Sometimes only one is there (SysWOW64) and this one uses 60-90 Mbs Of memory. ...
1
vote
1answer
366 views

802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)

So I have read that 802.11 standard requires stations and APs to go through the authentication and association before communication can take place. I also know that WPA/WPA2 has its own authentication ...
0
votes
0answers
20 views

Trend Micro Deep Security Agent/IPS module kill external to internal OpenVPN tunnel [closed]

We're attempting to deploy Trend Micro's on premise Deep Security manager and agents. We have a small subset of our AWS servers that are publicly accessible, a pair of VPN servers included (AWS ...
1
vote
0answers
20 views

Migration from TDM to All IP: any security issues?

My phone operator is slowly abandoning TDM (Time Division Multiplexing) to replace it with IP connections. What are the security risked related to this change? will all the phone line be like in a big ...
1
vote
1answer
43 views

Strange 'agetty' process running on my VPS.

Recently, I had to reinstall one of my VPS servers (again), due to malware. I took what I considered to be pretty good security precautions. I also locked the root account and am using sudo as well. ...
1
vote
2answers
81 views

Is creating a network bridge in order to connect a virtual machine to the internet insecure?

I have created a virtual machine using Hyper-V running OpenSUSE 13.2. In order to get an Internet connection on the virtual OS I created an external virtual switch. Windows 8.1 then automatically ...
1
vote
2answers
137 views

Hashcat does 1-7 numeric characters on brute force attack when specifying 8

I have Hashcat 0.49 on Kali Linux 1.1.0a and I have a .hccap file. It's a WPA2 Network in the file so I chose a mask of 8 numeric characters (?d?d?d?d?d?d?d?d) and instead of starting at 8 numeric ...
1
vote
1answer
347 views

secure use of psexec?

As of March 7, 2014 PsExec now "encrypts all communication between local and remote systems, including the transmission of command information such as the user name and password under which the remote ...
0
votes
2answers
101 views

Identifying the correct ssid

Suppose a wifi network is present with a given ssid.Now I create a hotspot with the same ssid as that of the original network.If a user tries to connect to the wifi , which one will he connect to?Also ...
1
vote
2answers
72 views

Is it Safe to Send an Invalid Password Back to the Client?

It is common for websites to remember the username input value after an invalid login attempt but not the password input value. Take SE for instance. When I attempt to login with an invalid password: ...
9
votes
10answers
487 views

Which factors should you take into account when deciding whether users should be informed of a penetration test?

Say you are conducting a penetration test of an internal network. The internal network comprises of workstations, servers and company and contractor laptops. In an ideal world, the penetration test ...
1
vote
1answer
71 views

What this type of attack called? (gaining peripheral information)

When the intruder looks at the transmitted data and finds information about the sender and the receiver of the data or other peripheral information that won't help him hack the system but know more ...
0
votes
1answer
185 views

Zeus botnet source code

I am doing my project on botnets and wanted to understand the source code of the Zeus botnet. Where is the right place to get started with some analysis of zeus botnet source code? I need a good ...
1
vote
1answer
107 views

User Binding Request with credentials in Lync Dump

I've dumped a call between two lync clients and saw that there were some UDP packets that look like this: Server -> Client 1132 14.495362000 <serverip> <clientip> STUN 146 ...
3
votes
1answer
133 views

How to sniff [possibly encrypted] TDS protocol data from the host the client application is installed on?

Let's say, there is an .NET application on a windows 7 host where I have administrator's access rights. The application works with remote MS-SQL server which I don't control, it also seems that the ...
78
votes
7answers
75k views

What is the difference between SSL vs SSH? Which is more secure?

What is the difference between SSH and SSL? Which one is more secure, if you can compare them together? Which has more potential vulnerabilities?
21
votes
7answers
1k views

Securing the security guy's home office: what should we do?

I read an article in the latest InfoSecurity magazine (an infosec trade rag by Elsevier) saying that us security professionals aren't necessarily taking the correct steps to protect our own home ...
0
votes
0answers
10 views

How to set up iptables [migrated]

I try to understand how iptables works but after a lot of hours and read a lot of articles i have stuck. That i want to do is DROP INPUT & FORWARD policy and open some ports. More specifically, i ...
3
votes
2answers
99 views

What is “Gateway Host Probe”?

I wanted to perform Stress Testing on my router using Metasploit to perform a TCP syn Denial Of Service attack. I have used the following commands: use auxiliary/dos/tcp/synflood set rhost ...
1
vote
5answers
52k views

How to effectivily block torrents on my network?

Hie, As per my network policy, we have to block all torrent traffic from network. To do this, I used to block all ports above 1024 on my firewall/proxy devices. But due to this, many other ...
1
vote
1answer
139 views

How to simulate network attacks and use wireshark to detect them?

I am working on a project which involves me to simulate a network attack and to use wireshark to detect the attack. DOS/MIM etc. I have found the following links that provided help but there are still ...
0
votes
0answers
41 views

Alternative to ECC for mobile security

I asked a question a couple of months back, which led me to ECC. The following question is in continuation: Current Setup: I've two devices A and B which need to interact with each other securely ...
4
votes
1answer
103 views

Ideas on how I can fragment captured network traffic?

I am trying to create a lab environment where I can analyze common IDS solutions (starting with Snort specifically) and their ability to reassemble fragmented IP trains. I have a collection of ...
0
votes
1answer
50 views

Snort - Rule: Alert all php requests

I am trying to understand writing rules for snort. Further goal is detection of sql injections like here. I've read the documentation of snort rules and created this rule: alert tcp any any -> ...
3
votes
1answer
146 views

Is it possible to sniff traffic of a remote network? (With admin access to router)

Me and a friend of mine are simulating a widespread scenario where router configurations are untouched (default passwords) and are visible from the internet. Him, acting as the victim, will constantly ...
1
vote
2answers
153 views

Internet monitoring and DNS encryption

If someone hides their DNS traffic by encrypting it with a service such as OpenDNS's DNSCrypt, would you still be able to see which URLs they're viewing? Also, if that person uses HTTPS 100% of the ...
0
votes
2answers
93 views

Is it safe to put my own router in my neighbour's DMZ?

I use my next door WiFi for a small charge as I am unable to install my own broadband connection. I have a 300Mbps WISP router connected with a fixed IP to my next doors router (192.168.0.2). My ...
2
votes
0answers
31 views

please give me an specific example about “a lattice model of secure information flow”?

Currently I read the paper "A lattice model of secure information flow", but I think this paper is so abstract. Could you please give me an specific example and describe what the secure information ...
1
vote
1answer
82 views

running botnet for analysis

I a very curious to understand botnets practically. I want to run a p2p botnet (storm or waledac) for analysis and learning. I have mainly two issues: Where can i get access to binaries of either ...
-4
votes
1answer
73 views

Does Server Mistrust improve security? [closed]

By server mistrust, I mean the fully implemented lack of customer plaintext on a vendor's system, and lack of vendor access to customer plaintext. Specific case in question: Password and SSH key ...
0
votes
0answers
35 views

Access an offline device [migrated]

I have a problem. My internet service goes out every few weeks (thank you Time Warner) and I want to be able to reboot my modem remotely. So how do I access my router if it's down? Or access a ...
0
votes
2answers
38 views

Sniffing TLS / SSL through HSTS?

Imagine the following: Client C wants to communicate with server S. The evil attacker A is the Man-In-The-Middle. C sends a request to S, A intercepts it. A creates a self-signed certificate with ...
2
votes
3answers
122 views

Where is the most secure location to host an admin panel?

I have an admin panel on my site, that enables me to control the content on my website. In order for the admin panel to achieve this, I must have a connection to the site's database. I have two ...
1
vote
1answer
79 views

Segregating a Printer in my Enterprise Network

I have a EAP-TLS network at home which I've managed for some time now. I just got a new Brother HL-5470 printer so I can finally print things at home, which is really nice. The only problem is that ...