Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
6
votes
1answer
2k views

Physical machines not detected when scanning from a VM

Some time back I asked about using metasploit on a virtual machine here. This question is a kind of 'part 2' of it. My testbed set up consists of 3 physical machines: A, B and C. Each of them have 1 ...
7
votes
1answer
395 views

How to send Wi-Fi management frames from macOS?

I realise that this question has been touched on before here. However, none of the solutions suggested solved my question and they all fail to answer the overarching question of how to send all types ...
1
vote
0answers
127 views

Prevent IP session hijacking

I was thinking of the following scenario : a network is behind a router (performing NAT) and firewall this firewall denies all unsollicited incoming packet a user on a computer of the network opens a ...
1
vote
1answer
70 views

Can my ISP see documents I print trough my wireless network printer that is connected to ISP-provided router?

As stated in title - I am wondering if connecting my printer to ISP-provided router could expose all of my printed data to his eyes? Cheers!
0
votes
2answers
167 views

Do you need to update a router that is set in bridge mode?

Since a router in bridge mode works like a modem, do you need to even update it?
1
vote
1answer
62 views

Webhook sending Purchase Details to handling Purchases from a Third Pary Service Secure?

I'm developing a mobile application for a client that sells digital courses on a service called Teachable that hosts their website and handles the purchase process for them. My client wants to keep ...
-1
votes
1answer
67 views

Do you have to be on the same WIFI for a Buffer Overflow attack to work?

I know how Buffer Overflows work but in order to do them do you have to be on the same WIFI as your victim. You need to send a packet to a specific device on a specific port. Therefore, unless port ...
4
votes
1answer
143 views

Why do I need root privileges to send a raw packet from a UNIX machine?

I was recently reading through the nmap port scanning documentation and it points out that to perform a SYN scan (-sS) you require root privileges because an unprivileged user cannot send raw packets. ...
1
vote
1answer
50 views

SSL Termination within corporate network

I know its is advised to encrypt the traffic within the company network. Should we also stay away from SSL termination after a reverse proxy that's proxies multiple worker nodes on the same LAN? By ...
4
votes
1answer
715 views

What is the risk that Windows 8's loopback protection feature protects me from?

Windows 8 requires Fiddler to set up an exemption when sending traffic to localhost. Since this is a default setting (and affects many computers): What security benefit does this provide How can I ...
2
votes
2answers
184 views

How does Shodan take screenshots from webcams which have authentication?

I just got my academic license for Shodan and I was playing around it. I noticed that when I use the has_screenshot:true filter it even shows screenshots from sites which requests authentication. How ...
0
votes
1answer
56 views

Is there any advantages in using a Network Intrusion Detection System, when already having a EDR solution?

Does implementing a Network Intrusion Detection System (NIDS) give you any advantages over an Endpoint Detection and Response (EDR) solution? I've been trying to do research on this, but are ...
0
votes
1answer
225 views

ARP poisoning NAC

I need some help in understanding the technique of Genians/Trustwave NAC regarding ARP poisoning. As seen here Bypassing Trustwave NAC, it looks like a good method, but I don't simply get it. With ARP ...
4
votes
2answers
1k views

How is TSC (TKIP sequence counter) calculated, in WPA?

I'm reading about 802.11, from IEEE's PDF, from page 1191, and in particularly I'm reading about TKIP. To decrypt and encrypt, you use a TSC (TKIP Sequence Counter) as you can see in these images: ...
0
votes
3answers
2k views

Should i use peer block to better secure my computer?

Should i be using peer block to secure my computer or is there a better way to accomplish the same task? I dont file share, my curiosity of peer block came from my research of security of my ...
0
votes
0answers
77 views

OpenWrt firewall mystery

I have my home network divided into multiple VLANs, with a main router running OpenWrt forwarding between VLANs, where each VLAN equals a firewall zone. Zone wan hosts the Internet router. Firewall ...
0
votes
2answers
112 views

How to avoid leaking your public IP to installed applications like browsers when using a vpn?

What is the easiest setup to hide your public IP from installed applications and prevent things like WebRTC leaks on a common Linux distro?
7
votes
2answers
18k views

Is it dangerous to disable the IPv6 firewall built into many home routers?

The router that my ISP has delivered contains an IPv6 firewall. The only configuration option is whether it is on or off. Apparently, this firewall simply denies all incoming connections. I ...
3
votes
2answers
459 views

Automatically change connection of VPN when accessing certain websites

So I am quite new to VPNs, just downloaded and installed NORDVPN despite the latest admission of security breach for a trial period. I am also running BitDefender TS on my computer. I wanted to know ...
0
votes
1answer
865 views

Investigate an unknown device connected to router

On my router(Virgin Media) I found a device labelled as "unknown" I often see the router not assigning the device name but I do have a clue about which device is. However this specific device got me ...
1
vote
1answer
88 views

intercept TCP traffic on compromised router

I have this configuration GATEWAY1 <----> ROUTER <---> GATEWAY2 I am on the compromised router, and I want to intercept/block the packets that come from G1,edit them , and forward on ...
1
vote
2answers
219 views

Hacking WPA/WPA2 passwords

Is there another method apart from using a wordlist to crack WPA/WPA2 passwords? because it's not going to work for all cases. Even using the biggest wordlist ever, there are cases where there won't ...
1
vote
1answer
71 views

Are my devices and information vulnerable in a public network? what are some solutions?

I'm Studying at a University that has a public network around campus that all students use. This network is even available at the dorms. Since all devices are connected to the same network, is my ...
1
vote
1answer
347 views

Multiple Independent Levels of Security vs Multilevel security

I am looking for a way to isolate two different networks from each other. Suppose we have 2 different networks (public and private). I am looking for a way to connect to these two networks via a ...
11
votes
5answers
12k views

Can I block the true IP address using X-Forwarded-For header in IIS?

All the traffic gets to my IIS server through a proxy. I can't block or white list IP addresses because all the traffic comes from the proxy's IP address. Can I use the X-Forwarded-For header with ...
0
votes
0answers
29 views

How easy to crack simple, custom algorithm? [duplicate]

Out of curiosity. I am a green as grass programmer coming from other career disciplines and am learning multiple languages right now so play nice and keep it simple please. Interested in simple ...
0
votes
1answer
93 views

How to monitor and manage ALL internet network activity [closed]

Is there a way to monitor and manage (block, unblock, log) all internet activity (mainly outoing traffic) from my computer? For example, in my android phone I've installed a VPN tool called "...
1
vote
1answer
935 views

Find Ripple20 using nmap or wireshark

Everyone might have heard about Ripple20 vulnerability which has impacted millions of IoT devices. I know that using Nessus or Qualys, it is possible to identify this vulnerability. Is it possible to ...
4
votes
2answers
3k views

Unknown MAC in network

A few days ago, I noticed an unknown MAC address in the statistics page of my home router. The OUI lookup yields Cisco as manufacturer. However, I don't have such a device in my network -- actually, I ...
2
votes
2answers
358 views

Can dual NIC Snort machine cause threats to bypass firewall?

I am thinking about building a Linux Snort machine that can listen to both WAN and LAN traffic. Setup I am thinking about: Snort computer with two NICs One NIC connected to hub/tap outside firewall (...
1
vote
1answer
93 views

Deauth not working on a certain network and I want to understand why

I've done some research for the past hour but I can't find a definitive answer to what is happening. So I use a AWUS036NHA, put it in monitor mode, sniff everything, then sniff the AP I want to do ...
0
votes
0answers
12 views

Does Hamachi and Other VPN software put your PC and your network at risk [duplicate]

Many users across many forums (particularly in gaming) have pushed the use of VPN software to allow for remote connection into locally hosted servers. Is this even secure for most users? There seems ...
2
votes
1answer
176 views

Why do infected hosts scan port 80?

I have my serve set up with AbuseIPDB so I can keep a log of all suspicious request and hacking attempts for my honeypot machine. I noticed an IP that sent a GET request to port 80. 177.154.28.130 - - ...
2
votes
2answers
191 views

Can your internet provider monitor your data (passwords, etc?)

Was typing in my password into an HTTPS website when I started to wonder if my home WiFi (whether a neighbor could have hacked into and monitoring it) is secure. When I type in Username123 Password123 ...
2
votes
1answer
1k views

How to “Scan for hosts” only using ettercap CLI?

I've been looking for a command to "Scan for hosts" in the terminal with ettercap CLI. How can I scan the local subnet from the ettercap terminal? The graphical ettercap has the options (see below):...
1
vote
0answers
49 views

Seeking Advice/Guidance on configuring VPN to Ubiquiti USG behind Cisco Meraki [closed]

Abstract: Access the USG network via VPN, through a Meraki MX84. Summary: I am currently working on setting up some new hardware and re-configuring a network that I am responsible for. The objective ...
1
vote
1answer
51 views

What is the threat/risk difference in opening multiple ports on one physical NIC on a home server vs creating VLANs and opening ports on each VLAN?

I have a single home server with a single NIC. I intend to run numerous services -- some will be internet exposed, some will not. I don't know if I am going to run them as VMs or Docker container but ...
-1
votes
1answer
77 views

my personal web history seen by my school [duplicate]

can my school or family know what I do on my home laptop which my dad gave and also has many of his ex company's information but I logged of everything can my school still see anything
1
vote
0answers
63 views

Is there any value in using macvlan/VLANs to create router aware networks to segment internet exposed containers vs non exposed containers?

I have a single home server with a single NIC. I intend to run numerous Docker containers -- some will be internet exposed, some will not. The way I see it, I have two options: Use the normal bridge ...
1
vote
1answer
121 views

Should you let yourself ssh into every machine in your network?

I am wondering how you should setup your network (AWS) so you can debug different things that might occur. Obviously there's logging, but it seems at some point you might require SSHing into the ...
8
votes
2answers
8k views

Using RSA with 3DES instead of plain 3DES. Does it make sense?

I have a large legacy code. Currently it is using 3DES encryption for a network based application. It encrypts data packets with a main key. This key is used to encrypt and decrypt (symmetrical). And ...
22
votes
5answers
5k views

Unidirectional continuous data transfer to an air-gapped computer

What would be a way to transfer files in one direction from internet-facing computerA => air-gapped computerB to protect the files on computerB from unauthorised disclosure, short of using an ...
2
votes
0answers
35 views

802.11s with SAE vs WPA-RSN (802.11i) on a MESH network

I'm investigating a protection options for a mesh network (p2p). The amount of nodes is constantly changing and possibly owned by different entities. We are thinking between 802.11s with SAE (...
1
vote
1answer
66 views

Outgoing messages while under massive denial-of-service attack

As I understand it, there is no internet protocol that provides true broadcast like in say a card game or a partially synchronous network assumption. How close can internet protocols come though? We'...
4
votes
3answers
25k views

VM Kali Linux - nmap why is so slow? [closed]

I was scanning an IP using this command: nmap -sT -p- -Pn <Ip_Address>, but is very slow scanning. To reach 100%, the command line said 3 hours remaining. Why is it so slow?
3
votes
3answers
4k views

How does Facebook really identify requests?

Today I have discovered something very strange. It seems like Facebook is playing some kind of unfair game for identifying one's online identity. So, here is what I have done: I have a regular ...
0
votes
0answers
30 views

Should one Windows Server serve both high and low trust devices?

The high and low-trust devices themselves are separated by VLANs, however they both need to be connected to an Active Directory. The only way for the low-trust VLAN to access the high-trust VLAN would ...
0
votes
2answers
46 views

Securely Connect Employee PC to Business Private Network

I've recently become the "tech guy" at a startup, and am tasked with standardizing our hardware infrastructure. Further more, I choose how employees working from home will connect to ...
0
votes
3answers
132 views

Traffic obfuscation under targeted surveillance

When you are under targeted surveillance and all of your internet traffic is tapped (including parts where you exit from a VPN to the internet), is there any point in using traffic obfuscation? It won'...
3
votes
4answers
14k views

What can I do about being heavily port scanned?

I have two devices connected wirelessly to my Linksys router while running Symantec Endpoint Protection on my computer. A few days ago I started using the internet by connecting the cable directly to ...

1
2
3 4 5
54