Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
1
vote
4answers
118 views

Is it possible to detect malicious software just by analyzing the code structure?

I'm a newbie to software security. I'm designing a network and I was wondering is it possible to detect if a program upgrade being downloaded on the network is malicious just by analyzing the ...
1
vote
1answer
192 views

Techniques used by highly sophisticated entities to snoop on VPN or SSH traffic?

It is mentioned in almost every where that very strong agencies, and governments are able to watch the online activity of the people. Aside from techniques like attacking computer networks, and ...
0
votes
2answers
169 views

How does neighbor know when WiFi/Internet is used?

A neighbor, somehow, knows, when I connect to the Internet - and begins shooting something at my home (ice pellets). Is there a way to prevent people from seeing my SSID/internet connection? We are ...
1
vote
2answers
207 views

Does turning off my modem before leaving home significantly improve security?

Like many, most of my time is spent away from home: at work, the gym, out socializing, etc. I'd estimate I use my internet a few hours a night. I never turn my modem off unless I travel for longer ...
0
votes
1answer
69 views

network icon on lock screen, group policy

In an office setting, where it is an open space design, should I ensure that the laptop has 'Do not display network selection UI', enabled? Why or why not
1
vote
1answer
83 views

How do botnets self-propogate exactly?

I am learning about malware and botnets and came across that botnets can "self-propogate" and I am confused as to how they can do this. I know that a botnet can be created through multiple people ...
0
votes
1answer
176 views

ARP poisoning NAC

I need some help in understanding the technique of Genians/Trustwave NAC regarding ARP poisoning. As seen here Bypassing Trustwave NAC, it looks like a good method, but I don't simply get it. With ARP ...
1
vote
0answers
130 views

How is eSIM profile cloning prevented?

How are eSIM profiles tied to a particular device? That is, what prevents a bad actor from digitally copying an eSIM profile (or, why is the eUICC chip required; can't we have a soft or emulated SIM)?
1
vote
2answers
58 views

Patching session fixation issue on Apache server

I recently ran a Nessus scan on my network, and one of the issues that it revealed is a possible avenue for cookie injection (session fixation) through Javascript. The related Nessus issue can be ...
0
votes
1answer
3k views

NMAP Commands Used in Option -A

I've found that using the command nmap -A gives me the most reliable results and according to the reference guide the option -A includes service detection, traceroute, and OS detection. I want to do ...
-3
votes
1answer
127 views

When connecting to someones wifi without using it, can they see search history from the past?

We visited a friend who's working as a programmer. He told me to connect my phone to his wifi so he could send me a picture, however he didn't send it and I left my phone connected to his wifi for an ...
1
vote
5answers
273 views

Using IP as authentication

I have a bunch of users that are all behind the same VPN. My website (outside of the VPN) is supposed to be only accessible for these users. There is no guest for this VPN. My website is https only. ...
12
votes
3answers
24k views

When does one require NetBIOS?

I've heard others talk of disabling NetBIOS, but over the years I have never understood exactly when this protocol is required. The wikipedia page explains very abstractly what it is, but not which ...
1
vote
1answer
284 views

Multiple Independent Levels of Security vs Multilevel security

I am looking for a way to isolate two different networks from each other. Suppose we have 2 different networks (public and private). I am looking for a way to connect to these two networks via a ...
1
vote
3answers
125 views

Understanding firewalls [duplicate]

I would like to understand how firewalls work in details, and understand the attack surface. TCP and UDP I understand that TCP and UDP are easy to filter. Programs on a computer need to ask the OS ...
0
votes
2answers
77 views

How to safely connect a possibly infected computer to my home's internet? [duplicate]

There is a laptop - not mine, someone else's. That someone else, as far as I know them, are a bit lousy in their security best practices (do they even have AV installed? not to mention OS patches or ...
14
votes
3answers
18k views

Pros and cons of disabling TCP timestamps

So, lynis informs me that I should unset net.ipv4.tcp_timestamps. I know that's a bad thing because an attacker could figure out which updates that require restarting the machine I haven't applied, or ...
0
votes
1answer
118 views

What do people mean when they talk about “hackers gaining access to our network” (at home)?

Have I fundamentally missed something between the time when I sat with my 486 IBM PC in the house, fully offline, and today? Do normal people actually set up complex local networks in their homes ...
4
votes
2answers
2k views

Unknown MAC in network

A few days ago, I noticed an unknown MAC address in the statistics page of my home router. The OUI lookup yields Cisco as manufacturer. However, I don't have such a device in my network -- actually, I ...
0
votes
1answer
1k views

Analyze / Sniff all packets from all devices connected to a router

First of all, before explaining what I'm trying to do, let me clarify that my intentions are not steal any information, as it's only for study purposes, not even for my own entertainment. I'm trying ...
2
votes
1answer
227 views

Ransomware - All computers infected but one

Let's say there is a particular network which has a "monthly" successful cryptolocker attack. Every time, every computer in that network is infected. The set up is like this: 1x Windows 2003 server (...
2
votes
2answers
300 views

Can dual NIC Snort machine cause threats to bypass firewall?

I am thinking about building a Linux Snort machine that can listen to both WAN and LAN traffic. Setup I am thinking about: Snort computer with two NICs One NIC connected to hub/tap outside firewall (...
0
votes
2answers
91 views

Why do firewalls focus on tcp and udp?

From what I can see, most firewalls seem to focus on tcp and udp. Why is that? Is it impossible or at least very unlikely for malware to use other protocols/custom protocols?
21
votes
1answer
6k views

SFTP, FTPS and SecureFTP differences and security implications

What are the basic differences and security implications of using SFTP, FTPS and SecureFTP.
1
vote
1answer
206 views

Is someone trying to hack into my server?

I'm a cyber security student and don't do server stuffs on regular basis, I was just wondering how to check SSH login logs and found that it can be checked using sudo cat /var/log/auth.log and checked ...
0
votes
1answer
79 views

Is it possible to intercept and modify a wireless TCP transmission?

Given three parties (all in the same LAN): A client, a server, and a MITM. The client and server communicate wirelessly, and don't encrypt their messages. The MITM can see the messages, but question ...
0
votes
2answers
74 views

Is there anything I can do past SSL pinning to secure my connection? [closed]

My goal is to prevent man-in-the-middle (MITM) attacks through proxies. I've implemented SSL pinning, which has helped significantly, but I'm wondering if there's anything more I can do that's worth ...
0
votes
3answers
48 views

Can Router logs give us information of which apps are interacting with each other? [closed]

A friend of mine said he could know which apps are installed on certain device and which apps are interacting with each other through the router logs. Is that possible? Can the logs give such an info. ...
0
votes
1answer
62 views

Modifying host file versus firewall

I am trying to protect a macOS computer. Specifically, I want to prevent the machine from making unwanted connections over the internet. I am aware of firewalls of course. But I stumbled upon the idea ...
0
votes
0answers
67 views

Outside Router MitM Attack

I'm trying intercept my router's ACS requests which are behind HTTPS. I don't think my router validates certificates so it is possible to do a MitM attack. I'm using a debian installed laptop with two ...
-1
votes
1answer
130 views

Does OpenVPN encrypt my traffic between my computer and VPN server?

I set up my own VPN by installing OpenVPN on a Ubuntu server, then I download client.ovpn file from Ubuntu server to my Windows laptop. And then, I import that client.ovpn to OpenVPN GUI app on ...
1
vote
1answer
99 views

lan-side denial of service affecting target's CPU performance

Why does a LAN-side UDP flood take up the target's CPU resources and make it sluggish? i.e: the mouse doesn't respond properly, opening an application is slow... Note: The computers are both ...
1
vote
1answer
114 views

Attack that stops internet access for several minutes

I have a question that might sound a bit weird: A friend of mine (Person A) is being attacked by a former friend (Person B) and now person A asked me for help. Person A and Person B know each other ...
0
votes
1answer
72 views

Is each office having their own router coming off the main router as secure as each office having their own internet line

Company A owns a building and leases out 2 offices to other companies. Telecom 1 provides internet to Router 1 with ip address x.x.x.121 Company A connects their router, Router A, to it and gives it ...
0
votes
1answer
149 views

nmap - how can I input a target to nmap from a file with the netmask attached?

I have a c program that gets the router IP and netmask and puts it into a text file in the format of 192.168.1.1/24. When I issue the nmap scan command with the target text file I get the unable to ...
1
vote
1answer
68 views

What is the industry best practice for when 3rd parties are hit with ransomware? [closed]

I am interested to know if anyone has experienced this, what was the response and more importantly, is there best practices to handle these situations? My organization recently had a case where one ...
5
votes
1answer
200 views

Symbiote Counter-Attack Detection

I saw this video on YouTube about hacking Cisco phones (and other embedded systems) and I was overjoyed when the presenter not only hacked, but presented a security solution. Intrigued, I started ...
2
votes
0answers
92 views

Best practices or advice to convince IT admins not to map network drives in privileged sessions with users

We are currently trying to enhance the security posture of our company, and this means changing how some IT personnel work. Put precisely, our IT helpdesk currently have 2 separate accounts: 1 for ...
1
vote
4answers
961 views

How to set iptables to drop packets that I'm not listening on?

I've got a Kali Linux box I use for pen testing. I would like to configure my machine to DROP incoming packets, but only when I'm not listening on them. e.g. if I run a netcat listener on port 80, I ...
1
vote
1answer
274 views

dhclient cloud-init /var/tmp process

There's a process that's running that I'm trying to investigate why its running and what its doing. The server is a Linux Ubuntu server running on AWS. Running 16.04. The process in question is: ...
2
votes
0answers
347 views

TCP reset attack / forged TCP reset prevention

How do you prevent someone from doing an TCP reset attack between client and host without having acess to host? I am trying to solve a CTF for fun and learning purposes. In one of the challenges I ...
-4
votes
2answers
174 views

Get IP address of camera

Is it possible to get the global IP address of a nearby camera? For example, an IP camera is connected to a network, but you are not on that network, and cant get access for whatever reason) but you ...
2
votes
1answer
790 views

How to “Scan for hosts” only using ettercap (“text”) terminal interface?

I've been looking for a command to "Scan for hosts" in terminal ("text") ettercap. Do anyone knows how to scan the local subnet from the ettercap terminal? The graphical ("gtk") ettercap has the ...
0
votes
0answers
55 views

Open Ports at ISPs Gateway

I am working to set up OpenVPN access to my home network. To do this, I had to contact my ISP, because they had the necessary port blocked at the Gateway/Router that I do not have access to. In my ...
97
votes
12answers
32k views

Landlord will be watching my data traffic, as mentioned in the lease agreement

I am moving to Germany, and in the contract I signed I had to accept that all my data traffic can/will be checked by the apartment owner. The contract states: Flatrate, aber hinter 30GB Tarif ...
0
votes
1answer
48 views

Can an ethernet device plugged into a switch block all the other ethernet devices?

And if so, what protections are available against this kind of thing?
0
votes
2answers
525 views

Replace IPSEC VPN with Shadowsocks, is it secure enough?

I've a web site (HTTPS) only allow authenticated users to access. Currently in the web server I grant access allow connection from a VPN gateway. So all users need to connect to this gateway in order ...
2
votes
1answer
49 views

Is there a way to access the local DB from external webapp?

I found a Django app running on http://test.com that is running on debug mode. After trying some wrong paths I got with the django error screen showing the stacktrace and the credentials used to ...
-4
votes
1answer
86 views

What is externalip? [closed]

My Glassswire app shows that avast has connected to a suspicious host "myexternalip"
4
votes
1answer
1k views

How do TSC (TKIP sequence counter) calculate into WPA?

I'm reading about 802.11, from IEEE's PDF, from page 1191, and in particularly I'm reading about TKIP. To decrypt and encrypt, you use a TSC (TKIP Sequence Counter) as you can see in these images: ...

1
2
3 4 5
51