The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
0
votes
0answers
56 views

Network Breach - Possibility

Hypothetically, if someone had unauthorized access to my network, there are a lot of things that can happen, depending on the point of attack and how it accessed, I can assume that anything that is ...
0
votes
1answer
56 views

What does “DECed” mean in Network Security?

As in this MIB documentation: http://www.circitor.fr/Mibs/Html/F/FORTINET-FORTIGATE-MIB.php#fgIpsAnomalyDetections fgIpsAnomalyDetections 1.3.6.1.4.1.12356.101.9.2.1.1.9 Number of intrusions DECed ...
0
votes
2answers
107 views

Is it expensive for ISPs to store browsing, text and call logs?

I couldn't really find this answer anywhere. If an ISP was to record every browsing, call and text we make/send, would it be expensive for them log and store this? Assume an ISP has 4 million devices ...
1
vote
1answer
118 views

Separation of devices for VPN / Firewall [closed]

Our company has two separate firewall devices from different vendors (Checkpoint / Cisco) for firewall and VPN access. We're currently evaluating the possibility of migrating to a newer, clustered ...
0
votes
1answer
159 views

Is my credit card information “wide open to hackers” without VPN?

I saw an ad for a vpn provider recently where they claimed that, without using a vpn, my credit card information is "wide open to hackers" while shopping on-line. I guess the implication here was that ...
0
votes
1answer
56 views

How would you characterize a cyber surface? [closed]

Thinking through a network boundary characterization, say firewall/IDS flux. How some activity may change profile of that surface.
4
votes
2answers
2k views

how can an attacker access a system through a compromised router?

Let's say an attacker gained access to the admin panel of a home router with port 21, 23 and 80 open. I mean the attacker has full control over the router, thus being able to port forward, etc... ...
1
vote
1answer
83 views

Kerberos replay attack within allowed range - authenticator won't prevent it?

In kerberos protocol the client, after receiving a ticket to the TGS server, sends a request to the TGS and adds an authenticator to the request. What if an attacker performs a replay attack within ...
5
votes
1answer
785 views

Is my router spying on my network traffic?

I got a new TP-Link router a couple months ago, and configured it to use the OpenDNS domain servers for basic content filtering across all household WiFi devices. Everything seemed to be great. ...
12
votes
5answers
20k views

How to detect hosts running in virtual machines with nmap?

I have to determine if a given subnet has virtual hosts. Are there any ideas about what switches to use?
0
votes
0answers
71 views

VDSL modem getting probed?

My ZyXEL VMG8924-B30A VDSL modem recently had these alerts in its log. The WAN IP address of the modem is 10.225.205.128. There was nothing like this before 1 May. What is this? 2019 -05 -01 T16:05:...
-3
votes
1answer
103 views

if i send a mail on protonmail and close account straight away is it trackable [closed]

I sent an email via protonmail. I then closed my account. Can you trace my email from this?
30
votes
5answers
43k views

How to find out that a NIC is in promiscuous mode on a LAN?

How to find out that a NIC is in promiscuous mode on a LAN?
1
vote
1answer
112 views

Is it possible to prevent man-in-the-middle attacks in token-based authenticated online games without packets encryption?

I'm creating a home made MMO server (as a hobby / way to learn something new). I've decided to use a token based authentication for game traffic. Many people say that you shouldn't use any kind of ...
0
votes
0answers
45 views

In Kerberos authentication protocol, why is the TGT encrypted using the user's key Ka?

When the user first logs in, he fetches his TGT from the KDC along with the session key. I get why Sa (session key) is encrypted with Ka (user's key). But why is TGT also encrypted with Ka. TGT is ...
0
votes
0answers
61 views

Best Practices for Securing a network for Developers?

Asking as a developer: There seems to be a lot of tension between what developers want/need and what the Security Team would like to have locked down at a lot of development shops. Approved ...
1
vote
2answers
4k views

TCP- or UDP-based Port Scans, IP Fragmented Packet

Is this normal or is someone trying to hack/attack me? How can I stop this? My router is a Cg3000v2 netgear provided to me by Optus. [TCP- or UDP-based Port Scan]411 Wed Aug 26 00:28:08 2015 27.253....
0
votes
0answers
34 views

standards reference to perimeter security

I have the following problematic that I am currently dealing with. I have two zones/perimeters that need to be interconnected, some standards protocols have to be whitelisted such as HTTP, FTP, SSH ...
0
votes
1answer
106 views

Is it safe to login using HTTP on a WPA2 protected home network?

I have a small network infrastructure in my home on which I'm hosting some services such as a website, file server and such. Many of those services have an administration web interface which isn't ...
2
votes
1answer
303 views

What is an Albert sensor?

Recent news articles have started to talk about government networks deploying "Albert sensors" (e.g., this article). What is an Albert sensor? And how effective is it? Going purely from context, it ...
0
votes
2answers
142 views

How do I list IP addresses a system is connecting to from its memory dump or OS image (obtained from FTK Imager)? [closed]

I'm looking for a tool that will enumerate the IP addresses that a system is connecting to. This is mainly for forensic purposes, to gather IOCs. I know we can run a netstat on windows, but would like ...
0
votes
2answers
121 views

Security of next generation firewall

In recent years there's been a number of IndieGoGo or KickStarter projects for smart device protection, or next-generation firewalls. Some examples are: Anonabox, Cujo, Dojo, Firewalla, Keezel, ...
1
vote
2answers
550 views

Is there a way to protect against mdk3 attacks?

I've got a home network using Wi-Fi. Someone is using mdk3 and disconnects users from the Access Point, whether they are Android or Windows Phone or Windows 10 desktop or Apple computers. Is there a ...
1
vote
1answer
174 views

How could the Chinese Communications Authority find a backdoor on my website?

I host a legacy HTTP website on my own hardware in China. It was attacked due to the Struts file upload flaw last month. But yesterday, Communications Authority in my province alarmed me, there is ...
0
votes
1answer
57 views

Network diagram based on Cisco ACL and other firewall rules [closed]

Are there any tools for automated building network diagram from ACL rules or any other firewall rules?
-5
votes
1answer
339 views

Monitor SSL traffic at home

There is an underage guest in my house for whom I will be legally responsible for the next few months and I'm concerned about some of his interactions online from some of the public postings I've seen ...
1
vote
1answer
286 views

Traffic anonymization through routing - software and algorithms

I stumbled upon an interview with "the grugq" in which he is talking about how hackers anonymize their traffic, i.e. hide their original ip address (- this is also what I will mean by "anonymizing" in ...
19
votes
4answers
62k views

How to tell if you're being ARP poisoned?

I am having some issues at work and there is a new network admin in place. I think I am being monitored so decided to run ArpSpy X in two scenarios: Over WiFi bridge plugged into Cisco router to took ...
0
votes
1answer
687 views

Meterpreter reverse shell alternative

What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
0
votes
2answers
176 views

Can a school monitor my school laptop? [duplicate]

So i'm on my school computer right now at home, and I was wondering, if i'm at home on my internet connection, can my school use their monitoring app (DyKnow) and see what i'm doing, from my wifi?
0
votes
1answer
100 views

Possible risks of multicast

I noticed that a android in my network is constantly connect to Multicast DNS IP. I seen this because my firewall block this inbound connection. Other devices connects to that IP too, but this android ...
0
votes
0answers
46 views

What ISP know about my local network when I use their ONU?

I have FTTP (Fibre to the Premises) and a GPON ONU given to me by my ISP. I know they can see hostnames and MAC of devices connected in ONU. If I connect my personal router to this ONU and then ...
0
votes
1answer
149 views

Windows Defender Network Protection component really aggressive, what to do?

Has anyone noticed that the Windows Defender Network Protection component (part of Exploit Guard) can be REALLY aggressive? Sometimes, in order to use a program, app or else, I need to set it to "...
1
vote
2answers
659 views

Firewalls vs DMZ

What's the difference between Firewalls and DMZs? These terms seem to overlap at time and I'm not clear on the difference. Maybe a DMZ is achieved using firewalls?
1
vote
1answer
147 views

Could my boyfriend be hiding his encrypted emails inside of my inbox? [closed]

is it possible that my boyfriend could be hiding his encrypted emails inside of my email inbox with my email address and I can't read them? And if it if that is possible is there way that I can ...
1
vote
0answers
33 views

Trouble connecting to LAN card (Lantronix Micro125) [closed]

I am having a tough time connecting to a LAN card (Lantronix Micro 125 'Embeded Device Server'). I can ping it, but the software I have to use to reset the card won't find it and the card doesn't show ...
-1
votes
1answer
106 views

Can employer see your posting content on a public site when using their network on their hardware [duplicate]

Can the employer identify you as the person that posted on a website (you logged onto the system using their computer) if the computer is replaced by a new one?
0
votes
1answer
364 views

How a computer can infect others devices on the same network?

As I said in this post, my father is very careless about online security. Besides what I already said on that post, yesterday I saw in his android that the permission to install of third-party apps ...
0
votes
1answer
45 views

Testing Network layer encryption enabled or not

I am new to network security. I have a requirement to test whether the network layer encryption is enabled or not. How do I test this requirement? Are there any automated tools available?
2
votes
3answers
221 views

How to prevent an infected PC from infecting other machines on the same network? [duplicate]

My father is pretty careless about his security and this is not new. He even said to me that in the last year he used Tor to access some links just for curiosity because he read about it in some news ...
2
votes
1answer
73 views

Can we use network hub as an MITM sniffing device?

My intention is to analyze all network traffic which is coming to and originating from a network connected device I have. From the configurations of the device I am able to proxy all the HTTP traffic ...
0
votes
0answers
118 views

Google Home Hub Network Traffic on Port 8009

I noticed my desktop, that has never been used for anything related to google home or signed into the google account used to manage the Home Hub, that is on the same subnet was sending traffic to the ...
6
votes
3answers
2k views

Cannot identify or block unknown MAC addresses

I've only got a basic idea about networking, Google is my teacher. Router: Tenda D303 Location: India Connection: BSNL Unlimited 1Mbps broadband. Friends and relatives visit me often, and connect to ...
0
votes
1answer
747 views

Is it advisable to accept STUN server connections?

My firewall reports outgoing connection attempts via com.apple.WebKit.Networking to a number of STUN servers (namely, stun.nas.net, stun.node4.co.uk, stun.voxox.com and stun.wwdl.net). This is ...
0
votes
0answers
113 views

Arpspoof not working properly

I'm testing MITM packet manipulation on the fly between two computers on the same switch, a layer 2 switch. I'm using a Kali Linux machine as the attacker and i have written a python script to ...
0
votes
2answers
304 views

Open ports on my NetGear router

I ran an nmap scan on my home router and I am seeing a ton of open ports. Is this normal? How do I go about closing them? $ nmap 192.168.1.1 Starting Nmap 7.70 ( https://nmap.org ) at 2019-03-16 20:...
1
vote
1answer
71 views

Can using simultaneous intrusion detection systems (IDS) create conflicts?

Can simultaneously using 2 or more intrusion detection systems (IDS) on the same computer or network create conflicts ? Talking about tools (as examples) such as but not limited to: tripwire, bro, ...
3
votes
2answers
438 views

Does someone need to be connected to my network to sniff HTTP requests?

TL;DR Would a potential attacker need to have my Wi-Fi password and be connected to my network in order to read HTTP requests? Over the past year or so, I have made a few DIY home automation projects....
1
vote
1answer
372 views

Is it safe to use Orbot with the normal Firefox browser on Android

I noticed that when using Orbots "VPN Mode" that my normal Firefox browser works fine and when I visit check.torproject.org it says I'm connected even though I'm not using the Tor Browser specifically....
0
votes
0answers
22 views

Is this type of attack possible? [duplicate]

I'm wondering if it is possible for an attacker to spoof his IP address to look like mine. For example, in Facebook's connection logs, would it be possible for an attacker to log into my account while ...