Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
0
votes
2answers
146 views

Does a secured guest network on my router create significant vulnerability?

Guests need to use Wi-Fi when they come by, so to minimize risk, I've simply kept a secondary secured router running for guests since it's not possible to understand anybody's computer & security ...
2
votes
1answer
40 views

What is the best way to create a PCAP file containing malicious traffic?

I'm in my last year of university and for my honour's project I am tasked with comparing two intrusion detection systems, snort and suricata, hosted on a virtual machine on my PC. As I have no access ...
0
votes
0answers
15 views

Server placement for vendor verification check over the internet. DMZ or Private?

I have various servers on-premises on a private network. Some of these servers need to reach out to vendor websites to check for patch status, license verification etc. Where should these servers be ...
2
votes
1answer
97 views

Is this TCP socket encryption and password storage implementations secure enough?

I'd like to know if this communication technique is secure enough against attacks, both on the connection itself and the password-storing procedures. Both the client and the server have access to 2 ...
0
votes
0answers
17 views

CyberRoam Reverse Shell or Admin Access [closed]

I'm interested if there are any current vulnerabilities for the CyberRoam routers to get access to the config page or maybe a reverse shell to the system. It's setup as a firewall to filter content ...
19
votes
5answers
75k views

Nmap says host down when host is up

I am using Nmap 7.12 on Mac OS X. The host that is being scanned is a Linux RHEL server in VirtualBox. I can ping the server and receive ICMP replies and vice versa. I am scanning an IP inside the ...
0
votes
0answers
41 views

How to find a network in order to run network scans for research [closed]

For my university cybersecurity project, I need to run some scanners, such as Nessus scanners or others, on some targeted network (unknown network structure). In the end, I will examine the scan ...
4
votes
6answers
1k views

Secure internet access while traveling

Given the risks of shared wi-fi as stated here, here and here, I would like to ask what are good practices for someone who is always traveling. While having your own wi-fi with a strong WPA2 password ...
0
votes
0answers
38 views

Docker for canary file and virus detection

I am looking to create a pipeline for cleaning a large amount of files which may include files infected with viruses or canary tokens (to communicate with the attacker). My strategy at the moment is ...
1
vote
1answer
472 views

Multiple Independent Levels of Security vs Multilevel security

I am looking for a way to isolate two different networks from each other. Suppose we have 2 different networks (public and private). I am looking for a way to connect to these two networks via a ...
2
votes
5answers
7k views

Cannot identify or block unknown MAC addresses (Part 2)

Previously, I mentioned 5 unknown MAC addresses often connecting to my router, and noticeably causes my internet to be slow. Router: Tenda D303, Location: India, Connection: BSNL Unlimited 1Mbps ...
1
vote
1answer
1k views

Find Ripple20 using nmap or wireshark

Everyone might have heard about Ripple20 vulnerability which has impacted millions of IoT devices. I know that using Nessus or Qualys, it is possible to identify this vulnerability. Is it possible to ...
0
votes
1answer
179 views

Watering Hole Website NTLM Steal Attack

I'm trying to recreate a Watering hole SMB theft attack where you send a victim a link to your website containing code like "file://ip/file.gif" Causing forced authentication which passes ...
0
votes
2answers
62 views

How does my HTTPS POST get blocked based on XML content?

There's a web application on a server which I have full access to which accepts POST requests on a REST endpoint. The request payload is expected to be an XML document. For request routing and load ...
3
votes
1answer
102 views

Same network steal data?

Say my home network has a wifi-password and my friends are connected to it (since I gave them my wifi-password). Is it possible for me to read their data transfer? If yes, then it would also be ...
0
votes
1answer
121 views

Getting reverse shell from firewalled target

Suppose this scenario: You are already inside a corporate network. Suppose to find out a RCE in a X service. The machine that hosts that service is behind a network-based firewall, ingress rules and ...
4
votes
1answer
721 views

Why does VPN forbid unrelated user logins on client machine?

Not looking for any solutions here, just explanation. I work remotely for a university in another state; they supply a proprietary VPN to connect to their network. I work on a Ubuntu machine and for ...
5
votes
2answers
3k views

Unknown MAC in network

A few days ago, I noticed an unknown MAC address in the statistics page of my home router. The OUI lookup yields Cisco as manufacturer. However, I don't have such a device in my network -- actually, I ...
2
votes
2answers
452 views

Can dual NIC Snort machine cause threats to bypass firewall?

I am thinking about building a Linux Snort machine that can listen to both WAN and LAN traffic. Setup I am thinking about: Snort computer with two NICs One NIC connected to hub/tap outside firewall (...
0
votes
2answers
92 views

Secure Authentication of Technical User to a Network-Appliance-HSM

Let's assume we have an internal environment consisting of some distributed systems, one central system and an internal PKI. The central system is serving a cluster of HSMs that shall be accessable by ...
4
votes
1answer
289 views

What is the need for firewall to be in "stealth mode"?

There is a firewall deployment case called "transparent mode", when the firewall does its job without routing and having IPv4 addresses, i.e. it is invisible. "Stealth mode" is ...
2
votes
1answer
207 views

Deauth not working on a certain network and I want to understand why

I've done some research for the past hour but I can't find a definitive answer to what is happening. So I use a AWUS036NHA, put it in monitor mode, sniff everything, then sniff the AP I want to do ...
0
votes
0answers
37 views

Blacklist of hostname/IP so user cannot access my server private network?

My Web API acts as a proxy for users to connect to another server: User ➡️ My Server ➡️ Any Internet Server. They do that by specify a hostname ftp.example.com or 111.111.111.111. I do not want them ...
4
votes
3answers
15k views

I want to host a server from my home computer; safe?

I am planning to make public a website I have been working on; it seems to me that the only way I can do this without needing to pay any extra money to external hosts etc. is by hosting the server ...
3
votes
1answer
202 views

What is the risk of having an old, Internet capable phone not used for Interned compromised? (not smartphone)

I'm talking about a class of old mobile phones that are not smartphones but are still (theoretically) Internet-capable, at least via 3G. Examples of such phones include Series 40 Nokia phones or the ...
0
votes
0answers
45 views

How to isolate Windows10 Virtual machine from w10 host (virtualbox) for malware analysis [duplicate]

My goal is to find malware that performs network activities and captures the traffic with Wireshark. I have a Windows 10 laptop host machine and VirtualBox which has virtual Windows 10 machine. I am ...
0
votes
1answer
86 views

LAN Only Webserver

I am on a 192.x.x.x network and have a local server that hosts some webapps for the local users of the network. The server is running: Ubuntu VPN Nginx Reverse Proxy with the site.conf including: ...
0
votes
0answers
36 views

Has anyone successfully set-up the original Sub7?

When I first entered the information security sector in 2007 I remember reading about a dated trojan called Sub7, released in 1999. Focusing on the legacy version, not the new release, has anybody ...
0
votes
1answer
75 views

What happens after SSL/TLS certificate expires? [closed]

This is what I understand about SSL/TLS protocol: Web server sends public key with cert. Client checks cert validity locally using trusted CA list. Client encrypts symmetric key using server's public ...
3
votes
3answers
176 views

Are TLS v1.3 connections over open Wi-Fi secure?

If a non-compromised device is connected to the internet via open Wi-Fi, anyone can view the traffic. But if all the connections to the servers use a reasonably secure cryptographic protocol (such as ...
2
votes
1answer
102 views

Blocking outbound connections to mitigate CVE-2021-44228 log4j?

As I understand it, a successful exploit requires a connection to an external server to download a payload. If a device can't be patched or otherwise mitigated, does restricting its outbound access ...
2
votes
2answers
453 views

Wi-fi Certificate Permission and Access to phone/data

There are several questions addressing similar questions, but not quite the same (others ask about MITM Attacks). They also state conflicting and opposing answers/responses, so I ask here 3 specific ...
1
vote
1answer
101 views

Securing home network when not controlling the router

I have just moved to a new place and the router is controlled by the managing company, what can I do to improve my security and my anonymity under this constraint?
2
votes
1answer
213 views

Securing docker containers on private LAN

I am using docker to run a few server apps on a raspberryPi with ports exposed to the open internet. If an attacker were to successfully infiltrate my docker containers, I would like to be certain ...
0
votes
1answer
9k views

Can't get a reverse shell [closed]

I'm doing my OSCP certification. On one of the lab machines, I'm having a really hard time getting a reverse shell. I scanned the machine and found port 80 open. I enumerated even more and found a ...
6
votes
1answer
1k views

Pivoting with Metasploit

I am trying to exploit a Windows VM on a different subnet behind a dual home Linux VM where I already have a shell. To keep it simple, I have a meterpreter reverse_tcp shell on the Linux VM (192.168....
0
votes
1answer
200 views

Spoof IP address after a TCP handshake established

Is it possible to spoof the IP once a TCP handshake was performed successfully? For example: Perform the handshake Use the session with the same IP which performed handshake but on different machine ...
4
votes
1answer
2k views

Powershell Empire - Token Impersonation

I have been struggling trying to get token impersonation to work in Empire 2.0. I use the credentials/mimitokens module to list and elevate to use a specific users token - I see mimikatz' output ...
1
vote
1answer
684 views

SMSC spoofing attack

I attended a seminar on Telecom networks few day back and there I came to know how vulnerable our signalling network (SS7/ SIGTRAN) is. The speaker discussed an attack in which a spoofed SMSC is ...
0
votes
1answer
150 views

Isolation AWS resources with multiple subnets vs multiple VPCs

I have AWS resources (e.g. EC2s, RDS instances) that I would like to isolate from each other so that if one is compromised, the potential damage is limited. I am most concerned about data leakage / ...
3
votes
1answer
124 views

How does the root in spanning tree protocol works?

I am studying spanning tree protocol attacks and I would like to understand a thing. The root is on the "top" of the tree, how can we exploit this to put in place an attack? We can, in some ...
0
votes
1answer
175 views

Using an active or passive scan, can I detect all devices connected to or transmitting via a Wifi network?

I know that it's possible to do a passive scan on all channels to see if an access point sends a beacon. However, is it also possible to listen to general Wifi traffic on that channel and assemble a ...
1
vote
1answer
134 views

How to handle a router from an apparently security-indifferent ISP with no possibility to switch?

My ISP's security strikes me as... somewhat alarming to my admittedly non-expert eyes. They store wifi passwords in plaintext on their website and allow changing it there - this is apparently meant to ...
0
votes
1answer
145 views

MacOS's Finder (and Xcode) accessing iDevices while network was off

I am trying to figure out what is wrong with my Mac. Here are my devices: iPad (7th generation, MW752LL/A) with iOS 14.01 (18A393), iPad Air (MD788LL/A) with iOS 12.4.8 (16G201), iPhone 6 Plus (...
69
votes
12answers
133k views

Why block outgoing network traffic with a firewall?

In terms of a home network, is there any reason to set up a router firewall so that all outgoing ports are blocked, and then open specific ports for things such as HTTP, HTTPS, etc. Given that every ...
2
votes
2answers
1k views

Why is my computer connected to amazon instances

When I run the command netstat -a to see the actual connections on my computer, I see all the time that my computer is connected to something like this ec2-xx-xx-xx-xx, not just one address it changes ...
0
votes
1answer
107 views

Can attacker who is previous visitor to my home network put factory reset resistant spyware on my pc and phone from the WAN side?

I am amateur/barely novice to home networking trying to narrow down, if at all possible, angles of intrusion. Attacker connects to home network after I willingly give password. Before they connect I: ...
3
votes
1answer
2k views

Potential router malware? Receiving "Access Denied" and other weird blocks from various websites

So I've been having some weird browsing behavior over the last few weeks and it's gotten a lot worse the last few days. I've been getting blocked/banned by various websites off and on. Here are a few ...
-2
votes
1answer
141 views

Is it safe to conduct DDoS attack on a live server?

I am new to cybersecurity industry. I want to try if the company server is vulnerable to DDoS attack. Is it possible to conduct DDoS attack without damaging the live server? What I mean is, my main ...
0
votes
3answers
149 views

Why would a legitimate application run on a non-standard port?

Among the many "threats", I see on my SIEM, a non-standard port is a top one. It's always been a false positive, but I don't understand why this happens frequently?

1
2 3 4 5
55