The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
-2
votes
0answers
46 views

NMAP makes the network unreachable [on hold]

While doing a SYN or TCP scan using Nmap, websites and the internet basically stops being reachable for a lengthy period of times, on all different devices for everyone. Is there a reason for this?
0
votes
0answers
36 views

Network Trojan detected [on hold]

I have been monitoring my network and detected a Network Trojan. A Network Trojan detected, an executable sent when remote host claimed to send a text file. The IP is registered to Akamai ...
0
votes
0answers
93 views

Can the router serve malware? [closed]

I had an infected device on the network so I took all of the machines besides the router offline and reinstalled the operating system from a clean copy, and then scanned each one after bringing them ...
0
votes
0answers
33 views

Why is TLS called application-level protocol? [duplicate]

I read this paragraph from rabbitmq networking page: Clients communicate with RabbitMQ over the network. All protocols supported by the broker are TCP-based. Both RabbitMQ and the operating system ...
-2
votes
0answers
42 views

Is my network still infected [closed]

Let's say i have a WIFI network which has a infected device on it if i reset every single device on the network but did not reset the router could those devices still be infected again? once they ...
-1
votes
1answer
46 views

threat intelligence gateway [closed]

A TOG (threat intelligence gateway) is a hardware piece that sits between the router and the firewall. The TIG uses the threat intelligence and filters out the malicious urls and IPs before reaching ...
0
votes
2answers
70 views

How to mimic a HTTP POST request?

I want to mimic a HTTP POST request that I intercepted and have raw on a file, what would be the best way to send it and be certain that I sent exactly the same request? example file: (private data ...
3
votes
1answer
164 views

It is not a hotspot, it was made to look like one while attacking my network [closed]

It is my first time posting on this forum, so correct me if I do things incorrectly. My ISP is Xfinity. I use their modem/router. I have been noticing unusual activities from my network and an ...
3
votes
1answer
262 views

How secure/safe is Eduroam?

The higher education institution that I attend uses Eduroam, a infrastructure and IT company that often caters for the infrastructure and network needs of research and educational organisations. I am ...
0
votes
2answers
63 views

firewall behaviour

If a client connects to a server he will start listening for the response on some random high port number. The client then expects any packet destined for that port to be a valid answer. Or does he ...
0
votes
1answer
38 views

ip_forward reverting back to 0 during ettercap subnet scanning [closed]

Im trying to arp spoof a local network but the /proc/sys/net/ipv4/ip_forward is reverting back to 0 when ettercap is performing subnet scan on a network hub. Even if i change it back to 1 after the ...
0
votes
0answers
37 views

Is it OK to use HTTP for internal communication between two micro-services deployed on AWS ECS fargate?

I have micro services deployed as AWS ECS Fargate containers. For internal communication they are using service discovery end point. In my opinion, it is OK to use HTTP for internal communication. ...
0
votes
1answer
48 views

SSL decryption/visibility on the host [closed]

Can host app see traffic before network encryption? E.g. can a host-based VPN app see cleartext traffic (http to https) to make any traffic routing decisions? Considering the TCP/IP model, all operate ...
0
votes
1answer
131 views

How safe is NAT in keeping my private network private

To extend on How can a webpage scan my local, internal network from the Internet? how safe is my private network against possible threats like DoS attacks, spoofing attacks, revealing info about my ...
20
votes
3answers
3k views

Why is it called a stateful and a stateless firewall?

I'm just wondering about the naming of these firewall behaviours. My basic understanding is that stateful filtering lets inbound traffic to return the outbound response without explicitly specifying ...
0
votes
1answer
66 views

What is the difference between a jumpbox and a reverse proxy?

These two seem to be an intermediary for external network and internal network. What is the correct use for each deployment? What are their differences?
0
votes
1answer
76 views

Nmap scan slow on some IP ranges [closed]

I'm a security newbie trying to scan a VPN in the range 10.0.0.0 - 10.0.15.254 using nmap on Kali Linux. The routing table: route -n Kernel IP routing table Destination Gateway Genmask ...
-1
votes
1answer
54 views

Would a firewall contain an explicit allow rule at the top?

Someone in an interview today told me every firewall has two rules: explicit allow at the top and explicit block at the bottom. Form the way I've always understood things firewalls are normally set to ...
5
votes
1answer
70 views

Detecting (and locating) rogue PXE server on a local area network

The computers on our office building are (via BIOS) configured to boot PXE as first option. This is a useful setting, as long as, when needed, we can remotely restore non-booting machines and all that ...
0
votes
0answers
16 views

Snort stops generating alerts when HOME_NET changed to public addresses

I have used snort for traffic analysis quite often and it worked fine as it generates rules that are corresponding to packets doing malicious activities on my HOME_NET which is always private ...
0
votes
1answer
64 views

How to create content rule in Snort

The aim is to detect, if anyone in the HOME_NET is searching for a particular term - say "terrorism" and generate an alert via a content based rule. I am using Snort 2.9 installed in a virtual ...
1
vote
1answer
104 views

Encryption on Mobile Devices - Multiparty Encryption - Key Management

I have the following setting: Let A, A', A'' be different mobile devices. They want to sent a secret message M to all (or some of) the C,C', C''. The message is passed on to B that stores it for some ...
0
votes
1answer
156 views

Preventing Basic Directory Traversal Attack in Linux application

I have a Raspberry Pi connected to my network and keep getting this vulnerability warning from my security software. I turned off the apache2 web server on the Pi, which fixed my port 80 issue but ...
0
votes
0answers
24 views

How to bypass egress traffic filtering for a reverse shell? [duplicate]

Say I have access to a linux server as non-root user (gained RCE using an exploit), say I am only able to run commands via http in bash/sh but I'm unable the to make the targeted server connect back ...
0
votes
0answers
40 views

How to read SlowHTTPTest range attack when Nginx is the server?

I'm running an application hosted on Firebase and did some tests using SlowHTTPTest. For SLOW HEADERS, SLOW BODY, and SLOW READ the output is quite similar, i.e. the service is available which makes ...
0
votes
1answer
92 views

Firebase ports scanning using nmap

Purely for research purposes used nmap to check security of my application deployed to Firebase. However, there some questions which I can't understand: Why Firebase has open so many ports? Something ...
3
votes
2answers
292 views

Can I blindly trust 127.0.0.1?

On my system (Ubuntu Server 18.04, if that matters) I have two servers. They are behind a Nginx reverse proxy (i.e. accessing service.mywebsite.com internaly proxies the request to 127.0.0.1:...
0
votes
0answers
18 views

Issues with finding a gateway with static routing [duplicate]

I am doing this online lab where I am hosting a Kali Linux box in VmWare fusion, and VPNing into the online lab. These are my networking adapters once I connect via VPN: eth0: flags=4163<UP,...
0
votes
3answers
117 views

Setting up a secure modem & router with ISP

I am looking to setup new internet service with an ISP and would like to purchase my own secure modem and router. Googling doesn't seem to give me the list of what I'm looking for, are there any ...
0
votes
2answers
209 views

Google suspicious activity warning persists for 4 days despite my confirming I recognize it, does this indicate additional security issue? [closed]

I had a google suspicious activity warning four days ago triggered by logging in from a location I don't use often. I accepted the offer to view the activity and acknowledged that I recognized it. ...
1
vote
0answers
89 views

How to decode kerberos tickets on wireshark? [closed]

It has been two days in a row that I spend hours trying to decrypt kerberos traffic using wireshark. For learning purposes, I want to be able to read the encrypted parts of tickets and authenticators ...
0
votes
3answers
116 views

What hardware and or software do I need in order to limit outbound traffic?

I have a situation where my users need to be able to access the internet and search engines to be able to perform their jobs. My problem is that I need to prevent them from being able to upload files ...
0
votes
0answers
23 views

How do you secure your PC and Wifi at a shared office/co-working space like WeWork? [duplicate]

I'm fairly good with PC's but no expert. I'm at a WeWork (coworking) and connecting to WeWork's wifi network. There are a bunch of tech startups, so quite a number of people who could potentially ...
19
votes
3answers
5k views

How Can I Process Untrusted Data Sources Securely? [closed]

Here is the conundrum: At my current company, we process physical discs from numerous third party sources and extract the data from them to ingest to our own system. While we can generally trust the ...
0
votes
1answer
83 views

DMZ an additional router

Recently I had an idea to test use a server (with ubuntu) and I need it to be accessible from the outside with port forwarding. I'm not often at home, but the internet provider doesn't like their ...
0
votes
4answers
114 views

Issues with using Usernames as PC Names

Our organization is looking on changing the naming conventions on our Admin PCs to make it easier for tech staff to remote into user machines. A current favorite idea is to pair user names with the ...
0
votes
2answers
143 views

Easiest way to secure my home network from work pc

I am about to start a work at home position using a mac. I will be using my own personal internet to connect to their servers through their VPN. I want to isolate my work PC from accessing my home ...
-1
votes
2answers
142 views

How to perform a security test/review/penetration testing of Ethernet ports?

I have been engaged by a client who wants its Ethernet ports checked to determine whether port security is functioning effectively. What can be the approach or steps to do check Ethernet port ...
0
votes
1answer
75 views

Preventing host discovery in network

With tools such as Fing (Android app) and netdiscover (Kali Linux tool) its possible to get all connected devices in network. How it's possible to prevent host discovery in a network?
0
votes
2answers
209 views

Why is 0.0.0 an associate of 0.0.0.0? [closed]

When i redirected a single webpage to an address http://0.0.0, i also found that 0.0.0 is an alias of the network address, but since it is only 3 bytes, this seems to be strange. Why would chrome and ...
1
vote
1answer
87 views

Norton Security blocked “Fake Tech Support Website” within router?

Norton Security (software installed on the computer) supposedly blocked a fake website coming from my internet router. (See the full alert details window screenshot). My internet router is a BT Home ...
0
votes
1answer
137 views

How can someone track work activity? [closed]

Problem: Recently we had an interesting thing which happened at work. My colleague was playing some Flash games at work and after some time someone from organization remarked about that and asked to ...
4
votes
1answer
245 views

How were nuclear launch codes authenticated?

What is the history of authenticating nuclear launch codes? Were hashes used for verification? How would a nuclear launch base be able to verify that the code is correct, and how were new codes ...
0
votes
0answers
31 views

Can telnet session be compromised via IP spoofing? [duplicate]

The scenario is following: A telnet server which has ACL implemented for telnet connections. A hacker spoofs IP and tries to connect to the telnet server. Consider that the hacker knows the ...
1
vote
4answers
240 views

Is it insecure to publish the private IP addresses of my devices?

I'm interested in both IPv4 and IPv6, but more-so IPv6 because of how unfeasible it is to find valid addresses by just guessing-and-checking. Edit: My concern is that more trust may be given to IPv6, ...
1
vote
1answer
83 views

Is there such a thing as a modern cable modem without an onboard operating system? [closed]

Is there such a thing as a modern cable modem without an onboard operating system? I’m looking for examples of specific models, in particular. Every modem I’ve looked at has a Web interface (e.g., ...
1
vote
1answer
77 views

Other computers/customers of my Internet Service Provider appears under my “Network” section in Windows Explorer

I could see many computers under "Network" section on the left sidebar of Windows Explorer, but I am the only one who uses computer on my home. So I suppose all those computers are also using the ...
4
votes
3answers
310 views

Is it dangerous to be within range of a compromised WiFi network, even if you don't connect to it?

If a network has been compromised (e.g. someone is listening on the traffic or there has been malware implemented on it), is it safe to leave a device (PC, cell phone, gaming device, etc.) in range of ...
0
votes
0answers
54 views

Why is generated different traffic for the same attack?

I created a scenario in VirtualBox (configured as internal network) with two machines: Windows XP and Kali Linux. I used ms08_067_netapi exploit from Metasploit and the payload windows/meterpreter/...
0
votes
1answer
102 views

Can I use a normal wifi adapter instead of a alfa card for evil twin attack?

I am new to security and more leaned on application security. But now I learning attacks like the evil twin I need an wifi adapter (correct me if I am wrong ) to do the attack. I live in a remote ...