Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
0
votes
0answers
39 views

How to plan an attack using correct vulnerability? [closed]

The issue is I got all vulnerabilities of Damn Vulnerable Linux(DVL) through Open Vulnerability Assessment tool and I have been trying to exploit, but for all exploits it gives me same error "no ...
1
vote
0answers
32 views

How to guarantee that files on a USB are never transmitted over the network with SELinux

I have activated SELinux in enforcing targeted mode: # getenforce Enforcing # cat /etc/selinux/config | sed '/^#/d' SELINUX=enforcing SELINUXTYPE=targeted The current context of the sensitive ...
0
votes
0answers
34 views

Sniffing the network traffic of a server in Java [closed]

Is it possible to sniff the network traffic of a server you are connected with as a client in Java. If so, how?
0
votes
0answers
47 views

Network Security: Reverse Engineering, Penetration Testing or Cryptography Engineering [closed]

I have raw network programming background with C++. I want to improve in the manner Network Security. I'm selfstudied and managed to break my own simple networks. When it comes to complex encrypted ...
0
votes
0answers
13 views

Do I have to be careful about DNS I'm using? [duplicate]

There's some website which I can't have access to and they return 403 error to me. On the other hand, there are some DNS servers, where if I use them, I can have access to those websites! Does using ...
0
votes
2answers
79 views

Is it safe to have an opened port on my PC with a proxy server listening?

I have a single port open for my own proxy server. All other ports are closed. Is it safe for my PC? Even if my port will keep getting bombed by hackers could my PC be exposed to them? There is no ...
0
votes
0answers
34 views

How to secure an open port and public IP address when clients must connect to it [duplicate]

I do not have a lot of experience in networking, however, I have built a live-chat application using socket.io and nodeJS. In order to do this, I had to open a port to allow other networks to connect. ...
0
votes
2answers
63 views

Is there any way to hide my using the internet (or maximize privacy) when connected via router to other computers?

I shall begin my question with the remark that I am not tech savvy at all! The problem is the following: A cluster of computers (laptops, desktops, etc.) A, B, C, D... are all connected to the same ...
3
votes
0answers
69 views

Is it possible to spy on Tor browser within local network?

Imagine yourself connecting your personal device to your workplace wi-fi network. Can managers, network administrators, or some other person/potential attacker see my browser's activity if I'm using ...
1
vote
1answer
59 views

Is it possible for IMSI-Catchers to block emergency calls?

The Wikipedia article about emergency numbers mentions that Most GSM mobile phones can dial emergency numbers even when the phone keyboard is locked, the phone is without a SIM card, emergency number ...
0
votes
0answers
101 views

Network administrator in my flat - vulnerabilities? [duplicate]

I'm concerned about my network that I'm currently using. There is an network on my flat with several access points in the building and the network admin is providing access - afaik it's PEAP with 802....
0
votes
0answers
28 views

Bettercap ARP Spoof Network Crash

Hello when I'm running ARP Spoof on Bettercap everything works fine. But after a moment the network starts crashing, because the devices on my network send to many request I think... ? How can I run ...
1
vote
1answer
56 views

Best Firewall Zone Settings for Security Gli-net Routers

I believe many will benefit from this as there is not clear answer online and I keep making my policies too strong and locking myself out from accessing the LAN admin panel. What would be the ...
0
votes
1answer
101 views

What type of activity at the WAN port of router can cause massive data uploads, when no devices are connected? [closed]

I have Airtel Broadband PPPoE connection with Public Dynamic IP assigned to my router Dlink DIR 615 (It’s old model and now discontinued). Intermittently I have noticed instances of unusually high ...
2
votes
3answers
116 views

What exactly determines which entities/servers “on the Internet” get to read my e-mails when I send them from X to Y?

Let's say, for example, that I have a Gmail account. I compose and send an e-mail to info@somecompany.com. They aren't using Google services, just so that we can exclude "special cases" where they ...
0
votes
1answer
63 views

Using an active or passive scan, can I detect all devices connected to or transmitting via a Wifi network?

I know that it's possible to do a passive scan on all channels to see if an access point sends a beacon. However, is it also possible to listen to general Wifi traffic on that channel and assemble a ...
3
votes
2answers
105 views

How to defend against network traffic pattern correlation attacks?

If i am chaining multiple VPN's and possibly running through Tor as well, network correlation attacks can be performed against me to try to locate my position. If my network spikes a download for 40MB/...
1
vote
1answer
50 views

Antivirus/DPI Solution with openvpn server

I wish to set up a system that I log into with openVPN on my Raspberry Pi 4. I have already set up an openVPN server with a PKI infrastructure as well as other services that run on the Pi (like pi ...
0
votes
4answers
129 views

How to identify IP from a UDP-based DoS

I'm running a Counterstrike server on UDP port 27015. I'm using Amazon AWS to host the game server. I have added only my friends' IPs (about 50 of them) into a security group so the rest of the ...
0
votes
1answer
82 views

Should the Router or Firewall Come First?

Network scenario.... I have a typical enterprise network meaning ISP>>>>Edge Router>>>>>Firewall|DMZ>>>>Switch>>>LAN. I know there are several debates on the internet about what device comes first ...
0
votes
5answers
109 views

Are downloads from http connections safe?

When downloading a file is there a safety concern when downloading from http connections/websites not https?
3
votes
3answers
130 views

Logging connections to hardcoded IP addresses

On a Windows system, I'm able to get a good idea of most outgoing traffic by enabling DNS query logging, but I am missing those connections that are made straight to hardcoded IP addresses. What would ...
1
vote
2answers
72 views

is iptable whitelisting secure enough in AWS

Suppose my app is hosted on multiple servers, within the same data center (say in AWS or DigitalOcean). To secure communication between these servers, I use iptable to whitelist each other's IP. ...
1
vote
1answer
152 views

What ports should be closed in windows 10?

How can I close ports in windows 10 and what ports are unnecessary to be open? How do I find these open ports to close? Also if I close a specific port on windows 10 do I have to close the outbound ...
2
votes
0answers
31 views

Deciding between MDR solutions offering endpoint agents with or without an additional network appliance?

There are a number of different Managed Security Service Providers (MSSPs) offering managed detection and response services. They tend to use what is called an endpoint agent, while only some use a ...
1
vote
1answer
95 views

Why do we need security measure likes control flow integrity and buffer overflow guard if we have good access control protocol in place?

Reading into information security, I noticed two branches. Access control when communication with external device by using some type of cryptographic authentication and encryption mechanism and things ...
16
votes
4answers
6k views

Security risk of connecting to two networks simultaneously

My employer issues a list of security recommendations when using a work laptop outside of the work network. The security recommendations are related to such risks as data theft, viruses, or other ...
1
vote
4answers
115 views

Is it possible to detect malicious software just by analyzing the code structure?

I'm a newbie to software security. I'm designing a network and I was wondering is it possible to detect if a program upgrade being downloaded on the network is malicious just by analyzing the ...
0
votes
2answers
168 views

How does neighbor know when WiFi/Internet is used?

A neighbor, somehow, knows, when I connect to the Internet - and begins shooting something at my home (ice pellets). Is there a way to prevent people from seeing my SSID/internet connection? We are ...
1
vote
1answer
80 views

How do botnets self-propogate exactly?

I am learning about malware and botnets and came across that botnets can "self-propogate" and I am confused as to how they can do this. I know that a botnet can be created through multiple people ...
1
vote
2answers
207 views

Does turning off my modem before leaving home significantly improve security?

Like many, most of my time is spent away from home: at work, the gym, out socializing, etc. I'd estimate I use my internet a few hours a night. I never turn my modem off unless I travel for longer ...
1
vote
1answer
86 views

Local Burp Proxy not showing routed packets

I created a hotspot on wlp2s0 and connected an android device, whose IP is 10.42.0.62. I am trying to route my all packets from my wlp2s0 interface to burp proxy which running on 8080 and I also ...
2
votes
1answer
86 views

What is the risk of having an old, Internet capable phone not used for Interned compromised? (not smartphone)

I'm talking about a class of old mobile phones that are not smartphones but are still (theoretically) Internet-capable, at least via 3G. Examples of such phones include Series 40 Nokia phones or the ...
1
vote
2answers
58 views

Patching session fixation issue on Apache server

I recently ran a Nessus scan on my network, and one of the issues that it revealed is a possible avenue for cookie injection (session fixation) through Javascript. The related Nessus issue can be ...
-3
votes
1answer
127 views

When connecting to someones wifi without using it, can they see search history from the past?

We visited a friend who's working as a programmer. He told me to connect my phone to his wifi so he could send me a picture, however he didn't send it and I left my phone connected to his wifi for an ...
1
vote
5answers
273 views

Using IP as authentication

I have a bunch of users that are all behind the same VPN. My website (outside of the VPN) is supposed to be only accessible for these users. There is no guest for this VPN. My website is https only. ...
1
vote
3answers
125 views

Understanding firewalls [duplicate]

I would like to understand how firewalls work in details, and understand the attack surface. TCP and UDP I understand that TCP and UDP are easy to filter. Programs on a computer need to ask the OS ...
1
vote
0answers
130 views

How is eSIM profile cloning prevented?

How are eSIM profiles tied to a particular device? That is, what prevents a bad actor from digitally copying an eSIM profile (or, why is the eUICC chip required; can't we have a soft or emulated SIM)?
1
vote
1answer
43 views

Webhook sending Purchase Details to handling Purchases from a Third Pary Service Secure?

I'm developing a mobile application for a client that sells digital courses on a service called Teachable that hosts their website and handles the purchase process for them. My client wants to keep ...
0
votes
2answers
76 views

How to safely connect a possibly infected computer to my home's internet? [duplicate]

There is a laptop - not mine, someone else's. That someone else, as far as I know them, are a bit lousy in their security best practices (do they even have AV installed? not to mention OS patches or ...
0
votes
1answer
116 views

What do people mean when they talk about “hackers gaining access to our network” (at home)?

Have I fundamentally missed something between the time when I sat with my 486 IBM PC in the house, fully offline, and today? Do normal people actually set up complex local networks in their homes ...
0
votes
2answers
91 views

Why do firewalls focus on tcp and udp?

From what I can see, most firewalls seem to focus on tcp and udp. Why is that? Is it impossible or at least very unlikely for malware to use other protocols/custom protocols?
0
votes
2answers
74 views

Is there anything I can do past SSL pinning to secure my connection? [closed]

My goal is to prevent man-in-the-middle (MITM) attacks through proxies. I've implemented SSL pinning, which has helped significantly, but I'm wondering if there's anything more I can do that's worth ...
0
votes
1answer
79 views

Is it possible to intercept and modify a wireless TCP transmission?

Given three parties (all in the same LAN): A client, a server, and a MITM. The client and server communicate wirelessly, and don't encrypt their messages. The MITM can see the messages, but question ...
0
votes
3answers
48 views

Can Router logs give us information of which apps are interacting with each other? [closed]

A friend of mine said he could know which apps are installed on certain device and which apps are interacting with each other through the router logs. Is that possible? Can the logs give such an info. ...
0
votes
1answer
60 views

Modifying host file versus firewall

I am trying to protect a macOS computer. Specifically, I want to prevent the machine from making unwanted connections over the internet. I am aware of firewalls of course. But I stumbled upon the idea ...
0
votes
0answers
67 views

Outside Router MitM Attack

I'm trying intercept my router's ACS requests which are behind HTTPS. I don't think my router validates certificates so it is possible to do a MitM attack. I'm using a debian installed laptop with two ...
-1
votes
1answer
130 views

Does OpenVPN encrypt my traffic between my computer and VPN server?

I set up my own VPN by installing OpenVPN on a Ubuntu server, then I download client.ovpn file from Ubuntu server to my Windows laptop. And then, I import that client.ovpn to OpenVPN GUI app on ...
0
votes
1answer
72 views

Is each office having their own router coming off the main router as secure as each office having their own internet line

Company A owns a building and leases out 2 offices to other companies. Telecom 1 provides internet to Router 1 with ip address x.x.x.121 Company A connects their router, Router A, to it and gives it ...
1
vote
1answer
113 views

Attack that stops internet access for several minutes

I have a question that might sound a bit weird: A friend of mine (Person A) is being attacked by a former friend (Person B) and now person A asked me for help. Person A and Person B know each other ...

1
2 3 4 5
51