Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
0
votes
1answer
284 views

Thought process behind firewall design

I'm preparing for an introductory information security examination in university and this is one of the tutorial questions on Firewall design. My concerns for the provided solution is how to define ...
0
votes
2answers
57 views

Is it possible to hack a database inside of local network by external attacker?

Can an attacker from global network hack a database located on office machine inside of local office network? For example after hacking a router, a gateway or the very machine? Or maybe there is ...
6
votes
1answer
994 views

Pivoting with Metasploit

I am trying to exploit a Windows VM on a different subnet behind a dual home Linux VM where I already have a shell. To keep it simple, I have a meterpreter reverse_tcp shell on the Linux VM (192.168....
1
vote
1answer
50 views

Is interface spoofing possible?

One commonly used iptables rule for Linux servers is this: # iptables -A INPUT -i lo -j ACCEPT Can we assume that this rule will only accept traffic which is sent from the local machine? Is it ...
0
votes
1answer
78 views

Spoof IP address after a TCP handshake established

Is it possible to spoof the IP once a TCP handshake was performed successfully? For example: Perform the handshake Use the session with the same IP which performed handshake but on different machine ...
0
votes
1answer
998 views

Metasploit over WAN (ngrok) - Specify different LHOST and LPORT for payload and listener in an exploit

I am testing some exploits over WAN with a port-forwarded server and am attempting to use a specific exploit module with the payload being a windows/meterpreter/reverse_tcp shell. This is all executed ...
0
votes
0answers
33 views

Management Network Architecture

I've recently taken a job that has me more involved in network architecture than I ever have been, so please offer me some patience. I am standing up a network at a new office location. So far I have ...
0
votes
0answers
47 views

A strange IP on a different subnet that my connection seems to run through [closed]

This started when I ran the tracert command because I was curious about the hosts my connection ran through. I saw standard ISP stuff, but I also found something strange. I saw that the first hop in ...
2
votes
2answers
957 views

Could an attacker spoof a whitelisted IP to access the network?

There is a network that is protected with a firewall and only one IP is whitelisted. Assuming the attacker knows the whitelisted IP, what would prevent an attacker from sending traffic via a spoofed ...
1
vote
1answer
573 views

SMSC spoofing attack

I attended a seminar on Telecom networks few day back and there I came to know how vulnerable our signalling network (SS7/ SIGTRAN) is. The speaker discussed an attack in which a spoofed SMSC is ...
4
votes
1answer
1k views

Powershell Empire - Token Impersonation

I have been struggling trying to get token impersonation to work in Empire 2.0. I use the credentials/mimitokens module to list and elevate to use a specific users token - I see mimikatz' output ...
0
votes
0answers
39 views

Creating a five device Network Monitoring System using 5 Raspberry pi's that will monitor upstream and downstream traffic [closed]

In my Cybersecurity class, we have been assigned an inquiry based learning project titled "Network Monitoring Systems", below is the description of the project as followed: What is an ...
1
vote
0answers
28 views

Unknown NbtNS Traffic Leaving My PC

I was alarmed by the network monitoring team that there is some UDP traffic headed to the Internet on port 137 which was detected as SMB traffic by our monitoring solution. What is interesting is that ...
0
votes
0answers
22 views

if i wanted to watch a youtube video on my school laptop could my school see the video i watched? or only see that i was on youtube? [duplicate]

Just as the title says, lets say hypothetically I type Youtube into the search bar and I am brought onto the main page of the website. If I was to hypothetically look up "The Entire Bee Movie ...
0
votes
1answer
33 views

Isolation AWS resources with multiple subnets vs multiple VPCs

I have AWS resources (e.g. EC2s, RDS instances) that I would like to isolate from each other so that if one is compromised, the potential damage is limited. I am most concerned about data leakage / ...
7
votes
7answers
38k views

How to properly encrypt a communication channel between a client and a server (without SSL)?

I have a poor knowledge in the world of cryptography, I'm just starting to learn it so I'm a newbie :) As a project for getting into the field of cryptography I want to write a client\server program ...
0
votes
1answer
119 views

Using an active or passive scan, can I detect all devices connected to or transmitting via a Wifi network?

I know that it's possible to do a passive scan on all channels to see if an access point sends a beacon. However, is it also possible to listen to general Wifi traffic on that channel and assemble a ...
0
votes
1answer
79 views

MacOS's Finder (and Xcode) accessing iDevices while network was off

I am trying to figure out what is wrong with my Mac. Here are my devices: iPad (7th generation, MW752LL/A) with iOS 14.01 (18A393), iPad Air (MD788LL/A) with iOS 12.4.8 (16G201), iPhone 6 Plus (...
1
vote
0answers
104 views

You are in charge of the security of a very small company. What steps would you follow to achieve a good security level? [closed]

first of all, I would like to admit that I belong to the offensive side of security (Penetration Testing) and this is not my common area of expertise. Last week I was thinking about how the market ...
1
vote
0answers
44 views

What data can be sniffed in a LoRaWAN network at various points?

What data or metadata can be sniffed in a LoRaWAN network at various points like the end-device (node), the gateway, the network server and the application server? Is there exists a standardized data ...
1
vote
2answers
107 views

How does Software Defined Perimeter (SDP) protect against certains attack that happen in the browser?

I have been doing a bit of research on SDP (Software Defined Perimeter) but it's still a bit unclear to me how it protects against certain types of attacks. On Wikipedia it says that it can protect ...
1
vote
3answers
14k views

Can a school wifi track your wifi after you disconnect?

So I logged into my school wifi on my laptop, and I was just wondering: Can they still track what I do even after I disconnect? I am using my own computer (not the school's,) but is it possible that ...
1
vote
1answer
122 views

Antivirus/DPI Solution with openvpn server

I wish to set up a system that I log into with openVPN on my Raspberry Pi 4. I have already set up an openVPN server with a PKI infrastructure as well as other services that run on the Pi (like pi ...
3
votes
1answer
1k views

Potential router malware? Receiving “Access Denied” and other weird blocks from various websites

So I've been having some weird browsing behavior over the last few weeks and it's gotten a lot worse the last few days. I've been getting blocked/banned by various websites off and on. Here are a few ...
-4
votes
1answer
2k views

Webcam hack while laptop is offline

Well, basically the subject says for it self. Is it actually possible to hack the webcam of a PC that is turned off? We're not talking about an infected machine. For example, by remotely turning ...
1
vote
3answers
194 views

Assigning static IP address other than 127.0.0.0/8 to loopback interface

We have the following configuration of the /etc/network/interfaces file which was setup by somebody else on this system. It has worked well by allowing other systems on LAN (and the internet) to ...
1
vote
2answers
83 views

Noob question on security of localhost

This may already have been answered, but I'm having difficulty understanding the technical jargon of various posts. I have to give a Callback URL to receive some sort of validation, to use an API. ...
1
vote
4answers
208 views

How to identify IP from a UDP-based DoS

I'm running a Counterstrike server on UDP port 27015. I'm using Amazon AWS to host the game server. I have added only my friends' IPs (about 50 of them) into a security group so the rest of the ...
1
vote
2answers
358 views

Alternative to Qubes OS network domain for a server

I know that Qubes Os is not suitable for a server use, but some of its features are quite interesting for that. In fact, all the network drivers are contained in a VM that run a different Linux based ...
0
votes
0answers
33 views

DNS Zone transfer scope for pentest

Say if route53 is used to route traffic to your web-app, is dns zone transfer on the name server (that'a authoritative for the hosted zone) automatically out of scope because its AWS?
2
votes
1answer
65 views

Securing docker containers on private LAN

I am using docker to run a few server apps on a raspberryPi with ports exposed to the open internet. If an attacker were to successfully infiltrate my docker containers, I would like to be certain ...
2
votes
2answers
8k views

Airodump-ng : why are BSSID not associated?

Using airodump-ng with my wireless adapter in monitor mode, I am able to get expected scan to run. I have a few questions : Why do BSSIDs show as "not associated" (note: not all of them show as ...
2
votes
1answer
70 views

Setup network with IoT devices

I bought a new router and I'm thinking to make my network a bit smarter from the security aspect. My question is now: How can I make sure that an attacker cannot get into my "secure" network ...
6
votes
1answer
11k views

VirtualBox Pen Test Lab Setup

So i'm trying to set up a pen test lab in virtual box on my windows 7 host. I have 3 guest OS's installed: 1.) BackTrack5 2.) Centos 5 Server/Snort (My Snortbox) 3.) Win XP (Unpatched) I have 3 ...
1
vote
0answers
44 views

Is hosting your own website safe? [closed]

So I made this website on python with Flask. I want to host this website on a rasberry pi on my own home network which everybody in my family uses. Should I? Is it safe?
1
vote
1answer
153 views

Local Burp Proxy not showing routed packets

I created a hotspot on wlp2s0 and connected an android device, whose IP is 10.42.0.62. I am trying to route my all packets from my wlp2s0 interface to burp proxy which running on 8080 and I also ...
3
votes
1answer
102 views

VPN doubt about “encrypting” an IP address

According to Kaspersky Encryption of your IP address: The primary job of a VPN is to hide your IP address from your ISP and other third parties. This allows you to send and receive information online ...
0
votes
1answer
186 views

Being charged with DDoS – my IP address shows on hacked computer

On July 21 2020 a business was subjected to DDoS attacks crashing their system and causing a very expensive problem. My IP address was used and I am being blamed and have to explain how my IP address ...
2
votes
1answer
163 views

Centralized brute force login detection using netflow data

Is brute force login detection feasible with netflow data? With the netflow data one could check the number of incoming packets to a specific destination port (for each flow). If the number is below a ...
6
votes
3answers
4k views

Is there any risk in allowing ping packets *out* through a firewall

The company I'm currently doing work for does not allow ping requests out through their firewall, for "security reasons" and I'm baffled as to why this is a concern. Before you point me to (e.g.) ...
1
vote
0answers
20 views

How do I use SYN cookies to perform a DOS attack [duplicate]

I am taking a computer security course but I have a question I am stuck on. You are the system administrator for a provider that owns a large network (e.g., at least 64,000 IP addresses). Show how you ...
12
votes
4answers
31k views

Should I allow communication on public networks?

I apologize if this is a newb question. Reading this prompt, it appears that I should check Private Networks and uncheck Public Networks. However, Windows defaults to the opposite being checked. Am I ...
3
votes
1answer
193 views

There are many ports opened by system on a Windows 8 computer - are the system files modified?

There are many ports opened by system on one Windows 8 computer: PORT STATE SERVICE VERSION 135/tcp open msrpc Microsoft Windows RPC 139/tcp open netbios-ssn Microsoft Windows ...
2
votes
2answers
37k views

How to find list of IP address in a network with multiple subnets?

There are many subnets connected via a router in the same network. I need to find list of all IP address available in each different subnet. I am able to get the list of IP address available in the ...
0
votes
1answer
1k views

Communicating routed interfaces for Cisco ASA 5506-X [closed]

Recently our organisation has been supplied a new ASA 5506-X to replace the old good PIX506e for a project. We have encountered a problem on routed interface on ASA 5506, which is very different from ...
0
votes
1answer
69 views

Redirection - Different Website from Different Computer

There are URLs which its only purpose is to redirect the HTTP requestor to a correct website. Say, if I tried to access example.com/0wa/RaNd0m from my computer, it would redirect me to wikipedia.com. ...
42
votes
6answers
8k views

Can I change my public IP address to a specific one?

It happens that I participate in a bug hunting program and analyzing the app I realized that there is a particular parameter that is very important for access control and that only changes with the IP ...
1
vote
1answer
61 views

Tracing MAC addresses found in router logs [duplicate]

How can I trace the following MAC addresses and find out who they are or belong to: 68:B9:D3:73:00:2F 98:E2:34:05:BD:8E When checking my router, these MAC addresses were in the drop-down menu.
6
votes
1answer
2k views

Physical machines not detected when scanning from a VM

Some time back I asked about using metasploit on a virtual machine here. This question is a kind of 'part 2' of it. My testbed set up consists of 3 physical machines: A, B and C. Each of them have 1 ...
7
votes
1answer
390 views

How to send Wi-Fi management frames from macOS?

I realise that this question has been touched on before here. However, none of the solutions suggested solved my question and they all fail to answer the overarching question of how to send all types ...

1
2 3 4 5
54