Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
0
votes
1answer
42 views

Does HSTS provide security advantages on private networks?

For systems that only connect to the internet via a single dedicated private network (no WiFi hotspots), and assuming no systems or components on that network are compromised, does HSTS (HTTP Strict ...
0
votes
0answers
28 views

Creating a small internal 'server' storage for an office [closed]

I have an office, where everyone uses the broadband stick on the office desktop PCs to connect to the internet (wifi receiver) by connecting to our ISP-given router. Now I need to set up an internal ...
0
votes
0answers
35 views

What happens when a router hits it's IP limit? [closed]

Say all of the internal IPs are taken, what happens when trying to connect to that network? Does it stop you from connecting, or does it kick out an existing connection to make room?
12
votes
3answers
13k views

Security measures for a WiFi access point?

I am planning to purchase a program that comes with an App that allows you to control the program via phone. The developer told me that the connection will be done via an extra WIFI box connecting to ...
-2
votes
0answers
28 views

How to configure Virtual machine IP and host IP [closed]

I have been given an static IP address and I need to configure my VM running on Linux to use this IP address. How, in this case, would my host IP be configured? Does my host IP need to be another IP ...
0
votes
2answers
70 views

Speed issues with VPN to cooperate network in Europe from Asia - is it possible to attach a local VPN server to the europe network? [closed]

Got this situation where we are forced due to security reasons to only be allowed to connect through VPN to our network - which is fine when you are in Germany (GER) where the main office is located, ...
2
votes
2answers
5k views

Block outgoing network traffic from “Smart” TV

The FTC has just settled a case with Vizio, saying that the company has been quietly capturing pixels from their smart TVs, matching those pixels to databases of content, and selling that information (...
1
vote
2answers
50 views

Securing Client-Server Architecture with VPN or a SSL-connection?

I developed a mobile application that runs on our company's mobile terminals. The mobile application connects to the company servers via GSM network. We had a meeting to decide how to secure the ...
3
votes
1answer
944 views

Potential router malware? Receiving “Access Denied” and other weird blocks from various websites

So I've been having some weird browsing behavior over the last few weeks and it's gotten a lot worse the last few days. I've been getting blocked/banned by various websites off and on. Here are a few ...
0
votes
1answer
80 views

Security of service requests on a public Wifi

I'm currently rebuilding my network infrastructure and am planning to make my NAS available trough an OpenVPN server running on my router for "outside" use (no port forwarding: NAS in private LAN, ...
17
votes
2answers
3k views

Potential risks of publicly uploading a Wireshark trace with TLS-related information?

Say I were to upload a Wireshark trace to a website that was publicly available. Say, with it, the SSL key log, certificate information, etc were available. If someone had the link to the trace, what ...
2
votes
2answers
148 views

FarCry 1 Server Security Risks?

Some friends and I want to play FarCry version 1.40 on PC over the internet on our own private server but we have some security concerns. Since the game was released 15 years ago and we'll be running ...
0
votes
1answer
74 views

I've sent a clear copy of my ID card using the WiFi at work

The title says it all, I needed to send my ID to some website so that they could verify my identity. But I took the picture with my phone, then sent it to myself via Messenger on iOS. I sent the ...
1
vote
1answer
62 views

Risk of contamination when network discovery is on + file sharing password?

We use the Windows 10 file/folder sharing feature to share files between two computers (A and B) that are on the same wifi network. In this network there are several infected computers (computers C). ...
2
votes
1answer
81 views

Can my work computer sniff my home network? [duplicate]

Can my work computer sniff the websites that my parents personal computer go through? I know this would be very unethical for the company to do so but I never realized this is POTENTIALLY possible ...
-2
votes
3answers
345 views

My home router has been hacked, what can I do? [closed]

My router has been hacked and all devices have had some sort of spyware installed (Don't ask me how I know this, just please take my word for it). Since they can see everything I do on my devices, ...
0
votes
0answers
39 views

Command line tools for checking if a VPN is leaking on a headless device

I have a headless device that is connected to a router with a VPN connection. Not al the devices connected to the router go through the VPN connection, since I have set rules on the router to tell it ...
1
vote
0answers
38 views

How can access to Intel ME / AMT be disabled with firewall? [duplicate]

Short of flashing BIOS, there seems to be no way to disable the Intel ME. So, is there a reliable way to block access to Intel ME, such using HW firewall (Firewall in front of the machine, not ...
0
votes
0answers
66 views

Cups encryption between server and printer

I wonder how safe is the connection between cups and a network printer. Connections from client to cups can be managed as TLS. However what happens bewteen cups and the printer? is all in clear ...
2
votes
1answer
87 views

Can a VPN provider or actors within its infrastructure access open ports on the client machine?

From my understanding of a VPN, it essentially creates a network between the two 'machines'. So if I have open ports (e.g. HTTP, SSH) on my client machine, those can be accessed by the VPN provider or ...
2
votes
1answer
55 views

Automatically change connection of VPN when accessing certain websites

So I am quite new to VPNs, just downloaded and installed NORDVPN despite the latest admission of security breach for a trial period. I am also running BitDefender TS on my computer. I wanted to know ...
0
votes
1answer
144 views

Thought process behind firewall design

I'm preparing for an introductory information security examination in university and this is one of the tutorial questions on Firewall design. My concerns for the provided solution is how to define ...
6
votes
3answers
190 views

Could a desktop application disclose location even if a VPN is used?

When using a proper VPN to access a remote server, the server should not be able to resolve your country of origin using your IP address because the IP provided in the request will be the one of the ...
0
votes
1answer
62 views

Is a VPN and Virtual Machine secure enough for running programs that might include malware [duplicate]

I am trying to start a business online but don't want viruses from any sketchy software that I will be downloading. I will be using a VM and a VPN but was wondering if I needed any other software so ...
1
vote
0answers
21 views

WMI Performance Adapter function for Chrome browser?

Does someone know why the WMI Performance Adapter (WmiApSrv.exe) always starts when launching Chrome browser? Whats the function of this service? I have heared this service can be maliciously used to ...
1
vote
0answers
62 views

Bought used IP security camera, should I reflash the firmware?

I bought an used IP security camera on eBay, I dont know who was the previous owner. I've always thought that we can't trust 100% any firmwares/OSes that were been installed or used by someone else. ...
2
votes
1answer
105 views

Centralized brute force login detection using netflow data

Is brute force login detection feasible with netflow data? With the netflow data one could check the number of incoming packets to a specific destination port (for each flow). If the number is below a ...
2
votes
0answers
79 views

Is there a name for creating a malicious subdomain under of legit domains, like XXbadsiteXX.blob.core.windows.net?

This is similar to domain shadowing, but there is no compromise taking place of a registrar account; these sites let users create subdomains. I was wondering if there is a proper name for this kind of ...
0
votes
0answers
3 views

How do you disable NetBIOS traffic on Mac OS? [migrated]

I noticed after running Responder on my internal network that my MacBook Pro is sending out NetBIOS name query requests looking for __MSBROWSE__ and WORKGROUP which Responder will send a poisoned ...
1
vote
1answer
146 views

Why is home Windows 10 machine listening on port 8080 by default?

Ever since we upgraded one of our home windows machines to Windows 10, Kaspersky has been logging blocked network intrusion attempts over port 8080. The exploit is a strange one and tries to hit a ...
64
votes
8answers
119k views

What is the difference in security between a VPN- and a SSL-connection?

I would like to design a client-server application where the server is placed on Internet. I assume that I could set up the client-server connection using VPN (is it using IPSec?) or using a SSL ...
5
votes
1answer
556 views

Government/ISP tracking of internet activity trivial to evade?

The recently announced Investigatory Powers Bill in the United Kingdom will mean that ISPs must store the internet activity of everyone for one year. Anyone who wishes to evade such tracking can use ...
0
votes
1answer
112 views

Command injection with brace expansion

Does anyone have more experience with bash brace expansions when dealing with command injections that filters whitespaces? I am encountering most likely not a filtering engine, but an bad parsing ...
2
votes
1answer
66 views

HMAC and integrity

I'm studying network security and I found this question in my slide, but don't have an answer. Discuss the use of keyed HMACs for guaranteeing the integrity of a file being transmitted over the ...
2
votes
0answers
32 views

Can NAT Table be vulnerable toward any poisoning attacks?

I am learning the general concept of network security, and becomes aware of two poisoning attacks on the network infrastructures, that is, DNS poisoning attacks and ARP poisoning attacks. They are ...
1
vote
1answer
144 views

Disabling external DNS lookups - is this really so beneficial for security?

I have recently started working for a company which disables external DNS resolution from the machines inside the network by not adding external forwarders to the internal DNS servers - the reasoning ...
5
votes
1answer
252 views

How can Nmap bypass Windows Server firewall rules?

I need to block all communication (inbound/outbound) from server A to server B (all ports/all protocols). Server A should communicate with every machine except server B. I can't place firewall rules ...
2
votes
1answer
1k views

Is it as easy to crack a wifi password, as shown in the video?

I was browsing YouTube and I came across this video In the video they show how to crack the password of a wifi using CommView, Aircrack and Wordlist. According to the video it takes about two ...
1
vote
3answers
121 views

MITM: Is and How is it possible to manipulate HTTP POST data sent by the host to the server

Is it and how is it possible to modify a HTTP POST parameter that is being sent by the host to a server assuming that you are in a man-in-the-middle position in a network? HOST(POST=foobar) --------> ...
13
votes
4answers
46k views

How does Team Viewer establish a Remote Desktop Connection?

I am wondering how is it possible for Team Viewer to establish the remote desktop connection over the internet even if the user has not enabled the 3389 port ? I am searching over the internet but ...
20
votes
3answers
3k views

Why is it called a stateful and a stateless firewall?

I'm just wondering about the naming of these firewall behaviours. My basic understanding is that stateful filtering lets inbound traffic to return the outbound response without explicitly specifying ...
0
votes
1answer
405 views

Do vendors put backdoors on network devices?

There are several articles about "planting backdoors on network devices by vendors intentionally" , for example Hardware Vendor Offers Backdoor with Every Product. They found backdoors that were made ...
1
vote
1answer
100 views

Can an unprivileged program modify an HTTP request response on the local machine?

Imagine you have a simple GET request going to server 123.456.111.222. Your client executable creates a winsock on the server IP (TCP) and sends the HTTP request (unencrypted) to the server. If a ...
1
vote
1answer
434 views

Is it possible to run Responder and/or Layer 2 ARP Poisoning over OpenVPN or an OpenVPN Ethernet Bridge?

Situation: We usually perform penetration tests from Linux machines connected to the clients local network. However for this test the client wants the start point to be a windows machine and has thus ...
0
votes
1answer
218 views

Does SSLSTRIP in MITMF only works when the victim visits for the first time?

I just started learning MITM attacks and I use MITMF to perfom these attacks. I have one question regarding to sslstrip. I notice that sslstrip only works when we first clear the cache and history in ...
8
votes
3answers
4k views

Restrict network access for a single process with SELinux or AppArmor

I have a Python script that access the network, and I want to deny it network access sometimes. How can I achieve this with SELinux or AppArmor? I want to be able to launch this specific script with ...
4
votes
1answer
2k views

Forensics - trace back DNS query origin on host?

So I tried to search the web for answers but didn't find any. Is there any way to trace back which exe file or application caused the computer to make a specific DNS query?
0
votes
0answers
258 views

Isolate devices on the same network

I asked a similar question on this topic and some guys recommended use VLANs or guest network, so I asked to a friend and he will give to me a router with guest network function. However, there is a ...
1
vote
1answer
158 views

Techniques used by highly sophisticated entities to snoop on VPN or SSH traffic?

It is mentioned in almost every where that very strong agencies, and governments are able to watch the online activity of the people. Aside from techniques like attacking computer networks, and ...
0
votes
1answer
63 views

network icon on lock screen, group policy

In an office setting, where it is an open space design, should I ensure that the laptop has 'Do not display network selection UI', enabled? Why or why not