Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

82
votes
7answers
16k views

Company claims hardwire connections are a security issue

Someone to whom I am related is at a study camp for their desired profession. This person, let's call her Jane, is supposed to be studying rigorously for two months. The housing provided offers ...
78
votes
8answers
27k views

How is no password more secure than username+password?

Context: I have a laptop supplied by my organisation. I am trying to connect to eduroam, but I cannot do it using my organisation's laptop. When I use a personal computer, it asks me for a username ...
-1
votes
2answers
656 views

How to handle the virus on my router?

I believe my router is infected with a virus. If it is, it has been infected for a large period of time (perhaps a year or more). Though, I only started to consider it being a virus around a week ago. ...
2
votes
2answers
673 views

Windows Servers in DMZ - managed via AD or standalone?

From a security point of view, does it make sense to connect the Windows servers that are running within the DMZ and should be reachable from the Web to the AD (running within the core network)? Or ...
0
votes
1answer
288 views

Do vendors put backdoors on network devices?

There are several articles that says that vendors plant backdoors on network devices intentionally, such as this one. They found backdoors that were made by the vendors. Also, I read somewhere else ...
1
vote
2answers
137 views

Am I being Hacked? So many defferent ip's in router firewall logs [duplicate]

My router dsl light was not stable; It keept disconnecting and connecting..So I logged into Router Homepage to check whats wrong and found there were so many different ip's in Router firewall logs I ...
0
votes
2answers
299 views

I used a work VPN on my personal computer at home while doing…“non-work” things…am I in trouble/can they see me?

I was using my own home personal computer on a weekend while connected to my work's VPN (it's called pulse secure), and was bored so I decided to look at some "non-work" related websites (possibly/...
-4
votes
2answers
139 views

Get IP address of camera

Is it possible to get the global IP address of a nearby camera? For example, an IP camera that is connect to a network, but you are not on that network, and cant get access for whatever reason) but ...
1
vote
1answer
214 views

How to detect a scan on a local machine?

Is there any way to detect a scan on the local machine ( the pc that I'm using with a linux os -ubuntu-) from the network that I'm connected to? I know that for the webservers we could check the ...
0
votes
1answer
661 views

Meterpreter reverse shell alternative

What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
1
vote
1answer
2k views

Can Whatsapp be MAC spoofed if the victim's device isn't on the same local network as the hacker's device?

I realize that MAC addresses are only used to tell different devices apart if they are on the same local network. So, what if they're not? Is MAC spoofing in Whatsapp still possible? Even if the ...
1
vote
2answers
175 views

Should organisations allow their employees connect with a VPN software from their own laptops to their machine at work?

I saw a few breaches on a very large scale where an organization like JP Morgan suffered a huge breach just by allowing their employees to connect via VPN to their machines at work. Seems that hackers ...
0
votes
3answers
110 views

Security risks of exposing a VM to single IP address on the Internet

I have a small office network with about 10 workstations and a single physical domain controller. I want to move it to the cloud. For that, I deployed a Windows VM on Azure, which I'm going to promote ...
1
vote
0answers
45 views

Sudden spike in received traffic when connecting to the Tor Network [closed]

Recently when using Tails, I've noticed that the traffic suddenly jumps to over 1TB when establishing a conenction to the Tor network after booting. It doesn't show up in Total Received and also, for ...
0
votes
1answer
255 views

Does using a router connected to an unsecured WiFi network add security?

If I connect a portable router like GL-AR150 to a public, unsecured Wi-Fi network at a hotel and create my own private, password-protected Wi-Fi network, how much more secure is this compared to just ...
-1
votes
2answers
158 views

What's the stealthiest proxy program available? [closed]

If, theoretically, one was using a network that force-disconnects your device from itself if you are detected using a proxy (such as a network configured with Cisco Umbrella or similar), but a proxy ...
1
vote
0answers
38 views

Are parts of my system susceptible to IP based malicious attack even with effective IPtables rules?

Yesterday I installed Cent OS 6 and had to flush the default IPtables rules (IPtables -F) in order to access a web app via my browser. Having very little experience with Linux/Network security this ...
4
votes
1answer
145 views

Simple File Transfer Protocol

My SIEM has produced something intriguing. I went looking for unauthorized SSH connections, and looked for the SFTP protocol by mistake. I found a Windows web server that is connecting from port 80 to ...
1
vote
2answers
159 views

nmap -sn through proxychains fails

Why I can not do the following with nmap? proxychains nmap -A -v 10.185.11.0/24 Output: ProxyChains-3.1 (http://proxychains.sf.net) Starting Nmap 7.60 ( https://nmap.org ) at 2018-08-07 10:12 EEST ...
2
votes
1answer
175 views

Is IP address whitelisting useful if the IP address is not “secret”?

I'm working on an application that will have access to API keys supplied by our users. The application makes API calls on behalf of our users. The API we're using allows users to whitelist IP ...
2
votes
2answers
133 views

Is SSH security necessary on an internal network?

I am running a VM on a spare laptop we have in the office, and have set it up for SSH access from my workstation. Currently I am using user/password authentication, but I would like to remove the ...
3
votes
1answer
195 views

Weird attack making my server CPU super high

I noticed that my server CPU is super high and the reason is grep "A" command After a deep look, that what I've found in my active internet connections list (netstat -tupn) tcp 0 0 ...
1
vote
1answer
326 views

Could an attacker spoof a whitelisted IP to access the network?

There is a network that is protected with a firewall and only one IP is whitelisted. Assuming the attacker knows the whitelisted IP, what would prevent an attacker from sending traffic via a spoofed ...
2
votes
1answer
349 views

What is NetSpectre?

A new attack was revealed in a document titled NetSpectre: Read Arbitrary Memory over Network (PDF warning). I've seen a few non-technical writeups about the fact that it's a pretty slow attack: ...
1
vote
1answer
113 views

Data on VPS is safe, or can accessed on rent VPS Virtual Server?

I rent a VPS server for two months to test a webapp. I insert data into SQL on this server and want to host web app to this virtual server for test. Can that server owner that rents a VPS to me or ...
1
vote
1answer
82 views

Refusal to 'open' up corporate network?

I am working a project which requires access to a service running on a remote server, over a single TCP port (>1024). This service runs on a machine located within an existing network, and the project ...
5
votes
3answers
256 views

As “Head of IT” is it reasonable not to have access to Email or backup management as could contain sensitive information

I work for a medium sized company of around 100 people or so - and I am employed to be Head of IT responsible for backups, security, sorting out technical issues, among other things etc etc. However ...
3
votes
0answers
97 views

Why exactly are self hosted websites deemed that dangerous? [closed]

Up to now I'm using a raspberry pi as a local server for trying out things or hosting my own little projects (beginner level), but I want to make it publicly available (most likely only for people I ...
0
votes
1answer
695 views

Import Wireshark Cookies into Firefox?

I'm trying to copy session cookies (collected using Wireshark) into a different Firefox sessions. But can't seem to find a method or working add-on to manage the cookies. Greasemonkey and ...
0
votes
1answer
181 views

Infect Android device from inside the network without target knowing?

Is it possible to malicious some device in the same network without the user knowing? there some people use malicious apps but the problem is the user have to see the dialog box application ...
2
votes
2answers
5k views

Should I allow communication on public networks?

I apologize if this is a newb question. Reading this prompt, it appears that I should check Private Networks and uncheck Public Networks. However, Windows defaults to the opposite being checked. Am I ...
0
votes
1answer
1k views

Sniffing an outbound HTTPS packet - only intercepted by certain software, can't decrypt

I'm trying to sniff an SSL-encrypted outbound packet. It's sent by the game Mass Effect 3 to an EA web service. When I sniff packets with Nirsoft SocketSniff, I can see the packet (positively ...
0
votes
1answer
2k views

What -sn -Pn does in Nmap?

-sn: It tells the nmap not to do any Port Scan. -Pn: It tells the nmap not to do any Ping Scan. Now when I use both together like this, nmap -sn -Pn host.com. What I saw in the terminal is Nmap ...
3
votes
1answer
235 views

Why is TLS still commonly referred to as SSL? [duplicate]

I am developing in Visual Studio 2017 and I'm writing an asp.net core 2.0 web application. In the project properties there is a checkbox for Enable SSL. Any idea why this is called SSL instead of TLS? ...
0
votes
2answers
76 views

Internal IP's Probing to Unknown External IP's

I recently took a CEH class and they mentioned checking for internal IP's probing to External unknown IP's to determine an attack. What would be the best way to gather and analyze these types of ...
0
votes
1answer
172 views

Why do I have a specific route for this strange IP?

I use ubuntu. The only apps I have in it are firefox and telegram, both downloaded through official channels. I use other apps with virtualization, so my main machine is mostly clean. I use a VPN so ...
0
votes
1answer
59 views

How to segregate computers from each other? [closed]

I have 10 Windows machines in the same network. I want to create two separate groups i.e. machines 1 to 5 in group "work1" and machines 6 to 10 in "work2". work1 and work2 have the same internet ...
3
votes
2answers
2k views

Why is DHCP considered insecure?

Most places I've worked at consider DHCP to be a bad idea for management networks, or "secured" networks. I'm curious as to why that is. Consider this scenario... There is an ISCSI storage network,...
4
votes
2answers
5k views

Is it dangerous to disable the IPv6 firewall built into many home routers?

The router that my ISP has delivered contains an IPv6 firewall. The only configuration option is whether it is on or off. Apparently, this firewall simply denies all incoming connections. I ...
-2
votes
2answers
175 views

Accidently watched content against company policy while connected to work using RDP

I was at home and had some work to be finished so I used IE connected remotely to my work PC finished the job but forgot to disconnect. After a while I started watch not-safe-for-work material in ...
0
votes
0answers
105 views

Feasibility of using serial port/cable to act as a simple data diode?

I'm trying to determine the feasibility of using a serial port/cable to act as a simple and cheap data diode. I'll be connecting 2 Windows PCs (1 of which is on a secured network) using a 1-way null ...
2
votes
2answers
115 views

Wi-fi Certificate Permission and Access to phone/data

There are several questions addressing similar questions, but not quite the same (others ask about MITM Attacks). They also state conflicting and opposing answers/responses, so I ask here 3 specific ...
3
votes
2answers
351 views

Meterpreter shell and system shell define?

What is the difference between Meterpreter shell and system shell? For example, if I found some vulnerability in a system which allowed both shells, then what should I go for, system shell or ...
1
vote
1answer
136 views

How does Client-Side-Exploitation get the System-level-shell in Metasploit?

For example, if my client is using a vulnerable Internet Explorer which was vulnerable to the Aurora Vulnerability (I know its old and patch, but for now, let's assume) then I use Metasploit Client-...
2
votes
2answers
100 views

How to verify server ownership by public IP (without associated domain)?

Company A has a set of servers with public IP address but not associated with any domain. The servers contain confidential information, so company A doesn't want to give access to 3rd party. Company ...
1
vote
0answers
37 views

Is it possible to circumvent (ignore) routing table without root permissions?

The local host is configured to send all non-local traffic to a restrictive firewall VM configured in the routing table (route). Preliminary scanning shows that other routers are available on the ...
1
vote
2answers
130 views

How to scan allowed outbound (destination) ports on the local host?

Without access to firewall rules, I want to scan allowed outbound (destination) ports on the local machine. I would take too long to start a netcat listener for each of the destination ports on a ...
0
votes
3answers
980 views

Are there any feasible ways to block the stunnel utility at the network level?

The stunnel utility written by Michał Trojnara allows, if I understand correctly, to "wrap" non-SSL protocols (such as ssh) in an SSL connection. For example, imagine that all network ports on a ...
1
vote
1answer
236 views

Can a hacker pretend his IP as my IP in order to send requests to my server? [duplicate]

I am using Google-compute-engine and I have opened my Server to receive request only from a certain IP address and at the specified port by creating a firewall-rule and allowed only this IP, now in ...
-1
votes
1answer
797 views

Why should not run Metasploitable on bridge network?

I have read on somewhere that: "Do not run Metasploitable (an Intended Vulnerable Virtual Machine) in your Bridge Network." Why? Does it create a bridge to the attacker's system directly? If yes, ...