Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
-1
votes
1answer
60 views

System Process PID 4 Attempt to connect to many risky IPs using local port 137 [closed]

I noticed in our APT solution that many endpoints in my company initiate connection attempts: Process initiate: system process PID 4 Remote risky IP 185.94.111.1 remote port: random remote ports ...
4
votes
2answers
376 views

What's the point of a DMZ if it has access to a DB inside inner network?

I understand that you place public facing servers in a DMZ and so if they are compromised, it doesn't compromise the inner network. In order to do so, the outer firewall forwards ports (80 and 443 in ...
1
vote
2answers
201 views

Is it possible to go undetected on a WiFi network?

How could someone go undetected on a WiFi? (No trace with NMap scan, not in network admin page) Is this even possible? If so, how can you prevent it? If being undetected while on WiFi network isn’t ...
0
votes
1answer
43 views

Using a WLAN router to create an access point

Would the local network administrator in my dorm be able to figure out that I'm using a WLAN router to access their wired internet connection? Assuming I'm not broadcasting the SSID.
0
votes
1answer
546 views

What is the difference between a jumpbox and a reverse proxy?

These two seem to be an intermediary for external network and internal network. What is the correct use for each deployment? What are their differences?
0
votes
0answers
165 views

Investigate an unknown device connected to router

On my router(Virgin Media) I found a device labelled as "unknown" I often see the router not assigning the device name but I do have a clue about which device is. However this specific device got me ...
-1
votes
2answers
134 views

When connecting via SSH, does the Diffie-Hellman key exchange take place over an unencrypted TCP session or does encryption occur before the exchange?

I'm a cybersecurity student and I'm eager to understand the basic processes of an SSH session. I wrote down the stages to the best of my ability but need help understanding what happens right after ...
0
votes
1answer
92 views

Security benefits of disconnecting from corporate VPN when not in use

I worked for some companies that recommend cutting the VPN connection when not needed anymore while working remote. The VPN is just required to access internal sytems. Nobody could tell me why, ...
3
votes
2answers
139 views

Is it possible to spy on Tor browser within local network?

Imagine yourself connecting your personal device to your workplace wi-fi network. Can managers, network administrators, or some other person/potential attacker see my browser's activity if I'm using ...
0
votes
2answers
105 views

How to securely exchange a symmetric key over a unsecure netwrok

I need to build a project for uni where I need to transfer data securely from a client to a server. I can't use PKI structures and can't save pre-shared secrets (Imagine travelling to china and some ...
0
votes
0answers
12 views

Session Hijacking with remote server [duplicate]

Session cookie can help to bypass 2FA. Suppose victim and attacker are on same network without firewall. Attacker wants to steal victims login session. So attacker sends original login page over ...
1
vote
3answers
113 views

Phishing attacks with two factor authentication

Making our own phishing page isn't a big deal. Copying source code from website and modifying link just does our job. But what if we want to add phishing page for 2FA in the same code? Consider the ...
2
votes
2answers
216 views

Wi-fi Certificate Permission and Access to phone/data

There are several questions addressing similar questions, but not quite the same (others ask about MITM Attacks). They also state conflicting and opposing answers/responses, so I ask here 3 specific ...
17
votes
3answers
15k views

Running windows in virtual machine, should I bother with security?

I'm running Windows in a virtual machine on my mac (via Parallels). Should I bother installing antivirus, firewall and using other conventional wisdom practices (like don't open unknown .exe etc)? I ...
0
votes
2answers
252 views

Installing xampp on virtual box?

I started learning PHP and I wanted to practice PHP code using xampp or wamp server. But after reading this and doing some google research,I thought that installing server software on my home pc ...
0
votes
0answers
31 views

Is possible to use promiscuous mode to sniff traffic between to devices connected by WiFi from another using Wireshark? [duplicate]

I've been read a lot about it, but I'm not 100% sure about it. The most clear response I've found is https://security.stackexchange.com/a/167845/163215 So, according to this, in this scenario: I ...
1
vote
0answers
57 views

When we should choose Virtual Private Cloud(VPC)?

Assume we build an application that has internal components (or microservices) on GCP (or AWS, Azure...). I guess there are 2 main security options: use VPC to protect internal communications. ...
1
vote
2answers
169 views

How to know if my router has been hacked?

I have a (maybe dumb) question for you. I was wondering if there is a way to know if my router has been hacked. I secured it the best that I can and also made it so only the mac addresses of the ...
0
votes
1answer
209 views

Thought process behind firewall design

I'm preparing for an introductory information security examination in university and this is one of the tutorial questions on Firewall design. My concerns for the provided solution is how to define ...
0
votes
1answer
46 views

School tracking applications with a school computer [duplicate]

with school computers can the school track what apps you are using without being connected to that schools WiFi?
5
votes
1answer
855 views

Pivoting with Metasploit

I am trying to exploit a Windows VM on a different subnet behind a dual home Linux VM where I already have a shell. To keep it simple, I have a meterpreter reverse_tcp shell on the Linux VM (192.168....
10
votes
3answers
42k views

Is NAT Loopback on my router a security problem?

Some DSL routers prevent NAT loopback. Security is sometimes cited as the reason. Is NAT loopback really a security issue? And if so, how is this exploited? NAT loopback... where a machine on the LAN ...
0
votes
1answer
108 views

Is there a way to lock down a network? [closed]

If supposing I discover that my network is being attacked by some hacker or is being compromised in any way and I am able to detect it. So, is there any software-oriented way of 'locking-down' the ...
0
votes
0answers
31 views

Risk of having Azure Multi Site-To-Site VPN with different client

My company decided to build an ETL server on Azure and share by multiple client. My task is to research on possibility to set up multiple VPN tunnel from cloud to multiple client office network. I ...
-1
votes
1answer
61 views

Can cellphone packets be read by someone who only has your phone number?

I got an IM from a person I recently got acquainted with this year. In the text message, he asked me if I knew the name of the website you download free ebooks from (libgen.is) I found it really weird ...
0
votes
2answers
69 views

How to find the location of the device connected to router

Someone is using my wifi other than my devices, so i checked the connected devices in the d-link and found the ip address of the user and saved it. Now how do I find the location of the user?
3
votes
3answers
150 views

Is server startup time sensitive information?

Let's say we have a web server. Server startup time is the time the server process was started. Say, the startup time was being leaked via its response headers due to the carelessness of a ...
1
vote
1answer
55 views

Security team making the firewall opening, good pratice? [closed]

I'm currently requested in my enterprise to do myself (security team) the firewall overtures requests in TUFIN (firewall workflow), instead of our local IT team. it's for simplicity and saving costs. ...
3
votes
3answers
8k views

What is same site scripting and what are some exploit scenarios?

I know it is an issue with how DNS is configured , but is it really dangerous if the attacker couldn't access your network?
1
vote
0answers
72 views

How can I stop an authorized user from consuming all the bandwidth on my home network? [closed]

Me and my neighbours share a home network managed by me, paid for by the landlord. This person overloads the bandwidth on the regular, jitter spikes up to the 300s,down speed fluctuates, overall ...
3
votes
2answers
7k views

Is promiscuous mode sufficient to sniff packets in a wifi network?

I'm connected to my WiFi network and I want to capture and analyze packets that other clients are exchanging with the gateway. I don't want to modify the content of these packets and I don't need to ...
33
votes
4answers
5k views

How can we secure communication of an unchangeable app (Zoom)?

During the COVID-19 pandemic, many of us are working from home using meeting apps like Zoom. It's all over the news that Zoom is lacking in its E2E encryption. Let's assume we're using Zoom and can't ...
1
vote
0answers
42 views

Anonymous (privacy-preserving) random walk

Quoting this paper - SmartWalk (https://dl.acm.org/doi/pdf/10.1145/2976749.2978319): For graph privacy, strong link privacy relies on deep perturbation to the original graph, indicating a large ...
0
votes
3answers
3k views

Strange device in routers client list

Due to a high number of clients connected to one of my routers I recently changed it's password and reboot it. I also disabled WPS. The router is a ZyXEL Prestige 660. After the reboot the client ...
0
votes
0answers
180 views

System Process PID 4 Attempt to connect to Public IP using port 445

I was cross checking my environment and i found that System process PID 4 establishing Outbound connection to public IP using Port 445 is that a normal behavior? OS: Windows 10 1909 System PID 4 ...
0
votes
0answers
63 views

Secure MPLS configuration: Does TCP port 646 (LDP) need to be generally exposed?

I am looking for expertise on MPLS configurations and security. A recent scan of my organization's public IPv4 perimeter networks using Rapid7 InsightVM has discovered a system which appears to be ...
35
votes
4answers
11k views

How fast can hackers change their IP address?

What is the speed and frequency that hackers can bypass rate limiting continuously in a website using login with an SMS OTP? The rate-limiting activates if the same IP address triggers SMS OTP more ...
0
votes
0answers
70 views

Is it a Bad Idea™ to open all IPv6 ports for devices in an isolated guest network?

At home I have a dual-stack IPv4/IPv6 broadband connection, and I also have a wireless access point. The access point currently bridges all traffic into my LAN, which is not segmented in any way, so ...
0
votes
0answers
58 views

Is it possible to gather information about a destination-nat host?

Let's say that I'm connected to a network where the ISP has setup a dst-nat from an IP they don't control to an IP that they control,like so: 1- Their DNS server resolves example.xyz to 1.1.1.1 (the ...
0
votes
1answer
78 views

Does TLS (Transport Layer Security) protect against deliberate tampering or accidental corruption?

If someone tampers with data being transmitted over HTTPS using TLS, would that result in a corrupted decrypted message or would it result in the error being detected such as through a cryptographic ...
22
votes
6answers
45k views

Is UPnP still insecure?

In today's world, on equipment that is properly updated to the latest software/firmware, is UPnP still insecure, or have its vulnerabilities been fixed?
1
vote
0answers
40 views

How to guarantee that files on a USB are never transmitted over the network with SELinux

I have activated SELinux in enforcing targeted mode: # getenforce Enforcing # cat /etc/selinux/config | sed '/^#/d' SELINUX=enforcing SELINUXTYPE=targeted The current context of the sensitive ...
0
votes
0answers
15 views

Do I have to be careful about DNS I'm using? [duplicate]

There's some website which I can't have access to and they return 403 error to me. On the other hand, there are some DNS servers, where if I use them, I can have access to those websites! Does using ...
0
votes
2answers
98 views

Is it safe to have an opened port on my PC with a proxy server listening?

I have a single port open for my own proxy server. All other ports are closed. Is it safe for my PC? Even if my port will keep getting bombed by hackers could my PC be exposed to them? There is no ...
1
vote
2answers
696 views

How do you shun an IP automatically based on the number of current connections?

If I have a single IP that's trying a Denial of Service attack, how can I automatically have it banned/shunned? I go in and manually put it in a group of banned IP addresses, but I'd like for it to ...
0
votes
0answers
34 views

How to secure an open port and public IP address when clients must connect to it [duplicate]

I do not have a lot of experience in networking, however, I have built a live-chat application using socket.io and nodeJS. In order to do this, I had to open a port to allow other networks to connect. ...
0
votes
2answers
76 views

Is there any way to hide my using the internet (or maximize privacy) when connected via router to other computers?

I shall begin my question with the remark that I am not tech savvy at all! The problem is the following: A cluster of computers (laptops, desktops, etc.) A, B, C, D... are all connected to the same ...
1
vote
1answer
70 views

Is it possible for IMSI-Catchers to block emergency calls?

The Wikipedia article about emergency numbers mentions that Most GSM mobile phones can dial emergency numbers even when the phone keyboard is locked, the phone is without a SIM card, emergency number ...
0
votes
0answers
101 views

Network administrator in my flat - vulnerabilities? [duplicate]

I'm concerned about my network that I'm currently using. There is an network on my flat with several access points in the building and the network admin is providing access - afaik it's PEAP with 802....
49
votes
8answers
65k views

Security risk of PING?

I have been told that PING presents a security risk, and it's a good idea to disable/block it on production web servers. Some research tells me that there are indeed security risks. Is it common ...

1 2
3
4 5
52