Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
0
votes
2answers
57 views

A 'secure' reference network diagram

Recently, I have found out about Microsoft Cybersecurity Reference Architecture. It shows how Microsoft products can fit into an existing company's network and policy setup, however it is quite ...
1
vote
1answer
55 views

Can a host OS be attacked through the network stack?

Forenote: I'm not familiar with how virtualisation works on a low-level (but I'd certainly like to learn) so this question could arise from ignorance. Example Scenario: One virtualised router is ...
0
votes
0answers
37 views

Are the mobility of the nodes lead to packet dropping in MANETs? [migrated]

As we all know, lots of reasons can lead to normal packet dropping in MANET networks, e.g., unstable wireless channel, overloaded nodes, and so on. I have a question about whether the mobility of the ...
0
votes
2answers
112 views

Assigning static IP address other than 127.0.0.0/8 to loopback interface

We have the following configuration of the /etc/network/interfaces file which was setup by somebody else on this system. It has worked well by allowing other systems on LAN (and the internet) to ...
0
votes
2answers
61 views

How to Forward Specific Traffic Through VPN?

Before we begin, I must admit myself as more of a novice in the world of networking. Thank you. I would like to send specific traffic through my VPN, through a local machine, or through WSL. ie. ...
0
votes
4answers
177 views

How to identify IP from a UDP-based DoS

I'm running a Counterstrike server on UDP port 27015. I'm using Amazon AWS to host the game server. I have added only my friends' IPs (about 50 of them) into a security group so the rest of the ...
0
votes
0answers
26 views

Commercial VPN Connected Devices Security [duplicate]

Would clients of a commercial VPN service be able to see each other's devices with NMap or a similar tool? What potential security consequences may transpire because of this threat? TIA
0
votes
0answers
26 views

How iptables layer 7 work with SSL [closed]

How iptables 7 work with SSL encrypted traffic ? Or what usage of iptables layer 7 in encrypted world ?
1
vote
2answers
259 views

Alternative to Qubes OS network domain for a server

I know that Qubes Os is not suitable for a server use, but some of its features are quite interesting for that. In fact, all the network drivers are contained in a VM that run a different Linux based ...
1
vote
0answers
45 views

How to Prevent Attacker from Abusing IPv4-embedded IPv6 to Bypass Security Mechanism?

Section 5.3 of RFC6052 explained how an attacker could abuse the NAT64 translation mechanism to bypass security mechanism such as firewall or IDS/IPS if those devices only have an IPv4 blacklist. The ...
3
votes
2answers
137 views

How is my school blocking new Internet traffic after midnight?

My school supposedly cuts everyone's connection at exactly 12:00am. Although the network is still there, Windows shows the "no internet" sign when connecting to the network. However, the ...
1
vote
3answers
13k views

Can a school wifi track your wifi after you disconnect?

So I logged into my school wifi on my laptop, and I was just wondering: Can they still track what I do even after I disconnect? I am using my own computer (not the school's,) but is it possible that ...
2
votes
1answer
198 views

Automatically change connection of VPN when accessing certain websites

So I am quite new to VPNs, just downloaded and installed NORDVPN despite the latest admission of security breach for a trial period. I am also running BitDefender TS on my computer. I wanted to know ...
0
votes
1answer
37 views

Using outdated ADSL modem with up to date router - Security Concerns

My parents live way out in the middle of nowhere. The only service provider that is not satellite is Century Link, which uses ADSL / phone lines. They wanted me to set them up, and the service guy was ...
0
votes
0answers
5 views

How to set Open DNS settings on router Tp-Link ARCHER MR600 with a 4G network? [migrated]

I'm trying to use OpenDNS to make my network safer. I use a TP-Link ARCHER MR600 which is a 4G modem router (I have a Sim Card inside it, I'm not on Adsl). I created my account on OpenDSN.com but ...
0
votes
1answer
94 views

netcat vs nmap for banner grabbing?

I am preparing for a security exam and a question I failed in a practice has the following: A command line tool that can be used for banner grabbing is called: A) tcpdump B) netcat C) nmap D) ...
-1
votes
1answer
92 views

What makes firewall pop up?

I am creating a file that uses Socket for exchanging data. When I use Python I have a firewall pop up where I am asked to accept the use of the application, but when my C++ program tries to do the ...
1
vote
1answer
122 views

Local Burp Proxy not showing routed packets

I created a hotspot on wlp2s0 and connected an android device, whose IP is 10.42.0.62. I am trying to route my all packets from my wlp2s0 interface to burp proxy which running on 8080 and I also ...
0
votes
1answer
115 views

Being charged with DDoS – my IP address shows on hacked computer

On July 21 2020 a business was subjected to DDoS attacks crashing their system and causing a very expensive problem. My IP address was used and I am being blamed and have to explain how my IP address ...
2
votes
1answer
143 views

Centralized brute force login detection using netflow data

Is brute force login detection feasible with netflow data? With the netflow data one could check the number of incoming packets to a specific destination port (for each flow). If the number is below a ...
2
votes
3answers
118 views

Internet Access for a company laptop

My roommate asked me to share my internet connection with him for his company laptop. I have the option to give him wireless (WiFi credentials) and wired access (ethernet). If I do decide to share, ...
-1
votes
0answers
55 views

Is there a way to bypass firewall/ obstructions with nmap?

Is there a way to bypass filtered ports with nmap? If the port is blocked by a firewall or other obstruction is there any way to bypass it and get information about the port. Here is an example: Host ...
3
votes
1answer
128 views

What is the risk of having an old, Internet capable phone not used for Interned compromised? (not smartphone)

I'm talking about a class of old mobile phones that are not smartphones but are still (theoretically) Internet-capable, at least via 3G. Examples of such phones include Series 40 Nokia phones or the ...
0
votes
1answer
54 views

MacOS's Finder (and Xcode) accessing iDevices while network was off

I am trying to figure out what is wrong with my Mac. Here are my devices: iPad (7th generation, MW752LL/A) with iOS 14.01 (18A393), iPad Air (MD788LL/A) with iOS 12.4.8 (16G201), iPhone 6 Plus (...
20
votes
6answers
42k views

What is the best practice for placing database servers in secure network topologies

I have a classic DMZ architecture: My webserver is placed in the DMZ. The webserver needs to communicate with a database server. This database server is the most critical component of my network as ...
0
votes
1answer
49 views

Redirection - Different Website from Different Computer

There are URLs which its only purpose is to redirect the HTTP requestor to a correct website. Say, if I tried to access example.com/0wa/RaNd0m from my computer, it would redirect me to wikipedia.com. ...
-1
votes
0answers
57 views

How tiktok ban works in india?

How tiktok ban works ? Tiktok is an android application. even using vpn it not works . Please explain in networking terms .
1
vote
0answers
32 views

Secure Implementation of Network Discovery Tool in Corporate Network [closed]

I would like to implement a network discovery tool, which automatically detects all devices in a network including OS information. I would like to do a very secure implementation. The biggest threat ...
10
votes
2answers
3k views

What does my ISP see if I change my DNS server?

I have an interesting question and I really want to get an answer to this. What does my ISP see if I change my DNS server and I use an HTTPS connection? Firstly, when I use my ISP's DNS server: So, I ...
6
votes
1answer
1k views

MAC overflow (flooding)

On a recent switch, is MAC flooding still a vulnerability to be careful of? If that attack is patched on most of them, then on which type of switch is it still vulnerable?
0
votes
3answers
82 views

Is a vulnerable router less of an issue when placed “behind” a secure one?

Assume router A, which is secure with up to date firmware, and router B, which is less secure, with no longer updated firmware. I have one router connected to the net socket (internet source), and the ...
17
votes
4answers
51k views

Nmap says host down when host is up

I am using Nmap 7.12 on Mac OS X. The host that is being scanned is a Linux RHEL server in VirtualBox. I can ping the server and receive ICMP replies and vice versa. I am scanning an IP inside the ...
0
votes
2answers
94 views

Do you need to update a router that is set in bridge mode?

Since a router in bridge mode works like a modem, do you need to even update it?
1
vote
1answer
54 views

Webhook sending Purchase Details to handling Purchases from a Third Pary Service Secure?

I'm developing a mobile application for a client that sells digital courses on a service called Teachable that hosts their website and handles the purchase process for them. My client wants to keep ...
0
votes
1answer
48 views

.local domain any possible ways in getting the extension

I was recently working on Broken link Hijacking and found a link in a target which reflected on multiple pages. It was portal.REDACTED.local which was not accessible and returned response as bad host. ...
0
votes
2answers
6k views

Is it possible to detect when a device has been MAC filtered on a Wi-Fi network?

Is it possible to detect when a device has been MAC filtered on a Wi-Fi network? I don't know if it's in the 802.11 standard, or if it's just implemented by ignoring the client network packets.
1
vote
3answers
160 views

Can schools track what I'm doing, even though I'm on my personal Gmail account?

My school can track my browsing when I'm at home and using the Google account they gave me, the laptop is my personal one. Is there a way that they could track what I do, even though I'm on my other ...
0
votes
1answer
62 views

Does a secured guest network on my router create significant vulnerability?

Guests need to use Wi-Fi when they come by, so to minimize risk, I've simply kept a secondary secured router running for guests since it's not possible to understand anybody's computer & security ...
1
vote
0answers
33 views

nmap -oG X.X.X.0-255 doesn't work and all my ports closed ( expected list of open ports ) [closed]

I'm running kali Linux on VirtualBox. I ran sudo ifconfig to get my IP and subnet mask (X.X.X.15 and 255.255.255.0 for eth0) I tried the command nmap -oG X.X.X.0-255 -vv but I got Read data files ...
-1
votes
1answer
110 views

Why do people, even programmers and geeks, seem to almost feel the urge to “give hackers a fair chance” at stealing their data? [closed]

I once heard that the author of the early NES emulator "Nesticle", clearly a very intelligent person, baffingly used some kind of exploitable "Samba" or "SMB" server ...
0
votes
1answer
212 views

ARP poisoning NAC

I need some help in understanding the technique of Genians/Trustwave NAC regarding ARP poisoning. As seen here Bypassing Trustwave NAC, it looks like a good method, but I don't simply get it. With ARP ...
9
votes
3answers
9k views

Need help identifying the OSX process that's generating strange network traffic

Since the past few days, I noticed that my router was a bit slow, and was restarting itself at times. When looked at its logs, they had entries like: Friday Jul 13 13:09:02 2012 1 Blocked by DoS ...
4
votes
2answers
1k views

How is TSC (TKIP sequence counter) calculated, in WPA?

I'm reading about 802.11, from IEEE's PDF, from page 1191, and in particularly I'm reading about TKIP. To decrypt and encrypt, you use a TSC (TKIP Sequence Counter) as you can see in these images: ...
1
vote
0answers
49 views

My college manages my Google account, can they view my browsing history if I use a personal device on a home network while logged in?

I have found multiple sources telling me otherwise, but most are outdated by a year or two. If I am logged into my G-suite managed account on google, and search something up on a home network and ...
0
votes
2answers
93 views

How to avoid leaking your public IP to installed applications like browsers when using a vpn?

What is the easiest setup to hide your public IP from installed applications and prevent things like WebRTC leaks on a common Linux distro?
0
votes
0answers
20 views

How does WPA MIC key protect its PSK variable during 4 way handshake process

Background: I had a hard time finding an answer to a simple question, about the very first communication between an AP and a client. In the 2nd packet delivered during the 4 way handshake process (the ...
1
vote
0answers
31 views

Security Concerns with HTTP/3 / QUIC-based protocols [duplicate]

I've been seeing a large number of companies, including Cloudflare who just sent out a notice to their customers about enabling HTTP/3 via QUIC recently, touting HTTP/3 based on QUIC as 'much better' ...
9
votes
4answers
9k views

Block all BotNets and TOR addresses from accessing our site

I've heard that many DOS attacks and general "black hat hacking" attempts occur over the TOR network. Is it possible for me to dynamically block source IP's by their presence in a BotNet or similar ...
1
vote
1answer
317 views

Multiple Independent Levels of Security vs Multilevel security

I am looking for a way to isolate two different networks from each other. Suppose we have 2 different networks (public and private). I am looking for a way to connect to these two networks via a ...
1
vote
1answer
70 views

Is there any value in redacting my private IP addresses when posting network questions online? [duplicate]

I recently filed a bug report with Scapy, and while posting screenshots of Wireshark captures for reference, I decided to blank out my private addresses because I'm just getting into InfoSec, and am ...

1
2 3 4 5
53