Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
0
votes
1answer
134 views

What type of activity at the WAN port of router can cause massive data uploads, when no devices are connected? [closed]

I have Airtel Broadband PPPoE connection with Public Dynamic IP assigned to my router Dlink DIR 615 (It’s old model and now discontinued). Intermittently I have noticed instances of unusually high ...
0
votes
0answers
40 views

Bettercap ARP Spoof Network Crash

Hello when I'm running ARP Spoof on Bettercap everything works fine. But after a moment the network starts crashing, because the devices on my network send to many request I think... ? How can I run ...
1
vote
1answer
73 views

Best Firewall Zone Settings for Security Gli-net Routers

I believe many will benefit from this as there is not clear answer online and I keep making my policies too strong and locking myself out from accessing the LAN admin panel. What would be the ...
2
votes
3answers
124 views

What exactly determines which entities/servers “on the Internet” get to read my e-mails when I send them from X to Y?

Let's say, for example, that I have a Gmail account. I compose and send an e-mail to info@somecompany.com. They aren't using Google services, just so that we can exclude "special cases" where they ...
3
votes
2answers
469 views

Why is browsing while logged onto a VPN from public wifi more secure than not?

I've been trying to wrap my brain around VPNs for a while now, but can't find a good source that answers the questions I have. In particular, I can't understand why browsing from a public access ...
1
vote
2answers
215 views

Disabling external DNS lookups - is this really so beneficial for security?

I have recently started working for a company which disables external DNS resolution from the machines inside the network by not adding external forwarders to the internal DNS servers - the reasoning ...
3
votes
2answers
169 views

How to defend against network traffic pattern correlation attacks?

If i am chaining multiple VPN's and possibly running through Tor as well, network correlation attacks can be performed against me to try to locate my position. If my network spikes a download for 40MB/...
0
votes
5answers
117 views

Are downloads from http connections safe?

When downloading a file is there a safety concern when downloading from http connections/websites not https?
3
votes
3answers
133 views

Logging connections to hardcoded IP addresses

On a Windows system, I'm able to get a good idea of most outgoing traffic by enabling DNS query logging, but I am missing those connections that are made straight to hardcoded IP addresses. What would ...
1
vote
2answers
79 views

is iptable whitelisting secure enough in AWS

Suppose my app is hosted on multiple servers, within the same data center (say in AWS or DigitalOcean). To secure communication between these servers, I use iptable to whitelist each other's IP. ...
1
vote
1answer
764 views

What ports should be closed in windows 10?

How can I close ports in windows 10 and what ports are unnecessary to be open? How do I find these open ports to close? Also if I close a specific port on windows 10 do I have to close the outbound ...
63
votes
6answers
449k views

If someone hacks my wi-fi password, what can they see and how?

If someone knows my wifi password (be it WEP or WPA) what can they see? Do they just see URLs I visit, or can they see everything in my browser, or even everything I do on my computer? Does using ...
5
votes
2answers
562 views

Detecting (and locating) rogue PXE server on a local area network

The computers on our office building are (via BIOS) configured to boot PXE as first option. This is a useful setting, as long as, when needed, we can remotely restore non-booting machines and all that ...
1
vote
1answer
102 views

Why do we need security measure likes control flow integrity and buffer overflow guard if we have good access control protocol in place?

Reading into information security, I noticed two branches. Access control when communication with external device by using some type of cryptographic authentication and encryption mechanism and things ...
16
votes
4answers
6k views

Security risk of connecting to two networks simultaneously

My employer issues a list of security recommendations when using a work laptop outside of the work network. The security recommendations are related to such risks as data theft, viruses, or other ...
1
vote
1answer
115 views

Can an unprivileged program modify an HTTP request response on the local machine?

Imagine you have a simple GET request going to server 123.456.111.222. Your client executable creates a winsock on the server IP (TCP) and sends the HTTP request (unencrypted) to the server. If a ...
16
votes
4answers
50k views

How does Team Viewer establish a Remote Desktop Connection?

I am wondering how is it possible for Team Viewer to establish the remote desktop connection over the internet even if the user has not enabled the 3389 port ? I am searching over the internet but ...
2
votes
0answers
46 views

Deciding between MDR solutions offering endpoint agents with or without an additional network appliance?

There are a number of different Managed Security Service Providers (MSSPs) offering managed detection and response services. They tend to use what is called an endpoint agent, while only some use a ...
1
vote
4answers
119 views

Is it possible to detect malicious software just by analyzing the code structure?

I'm a newbie to software security. I'm designing a network and I was wondering is it possible to detect if a program upgrade being downloaded on the network is malicious just by analyzing the ...
1
vote
1answer
196 views

Techniques used by highly sophisticated entities to snoop on VPN or SSH traffic?

It is mentioned in almost every where that very strong agencies, and governments are able to watch the online activity of the people. Aside from techniques like attacking computer networks, and ...
0
votes
2answers
177 views

How does neighbor know when WiFi/Internet is used?

A neighbor, somehow, knows, when I connect to the Internet - and begins shooting something at my home (ice pellets). Is there a way to prevent people from seeing my SSID/internet connection? We are ...
1
vote
2answers
213 views

Does turning off my modem before leaving home significantly improve security?

Like many, most of my time is spent away from home: at work, the gym, out socializing, etc. I'd estimate I use my internet a few hours a night. I never turn my modem off unless I travel for longer ...
0
votes
1answer
71 views

network icon on lock screen, group policy

In an office setting, where it is an open space design, should I ensure that the laptop has 'Do not display network selection UI', enabled? Why or why not
1
vote
1answer
98 views

How do botnets self-propogate exactly?

I am learning about malware and botnets and came across that botnets can "self-propogate" and I am confused as to how they can do this. I know that a botnet can be created through multiple people ...
1
vote
0answers
136 views

How is eSIM profile cloning prevented?

How are eSIM profiles tied to a particular device? That is, what prevents a bad actor from digitally copying an eSIM profile (or, why is the eUICC chip required; can't we have a soft or emulated SIM)?
1
vote
2answers
76 views

Patching session fixation issue on Apache server

I recently ran a Nessus scan on my network, and one of the issues that it revealed is a possible avenue for cookie injection (session fixation) through Javascript. The related Nessus issue can be ...
1
vote
1answer
4k views

NMAP Commands Used in Option -A

I've found that using the command nmap -A gives me the most reliable results and according to the reference guide the option -A includes service detection, traceroute, and OS detection. I want to do ...
-3
votes
1answer
135 views

When connecting to someones wifi without using it, can they see search history from the past?

We visited a friend who's working as a programmer. He told me to connect my phone to his wifi so he could send me a picture, however he didn't send it and I left my phone connected to his wifi for an ...
1
vote
5answers
279 views

Using IP as authentication

I have a bunch of users that are all behind the same VPN. My website (outside of the VPN) is supposed to be only accessible for these users. There is no guest for this VPN. My website is https only. ...
12
votes
3answers
25k views

When does one require NetBIOS?

I've heard others talk of disabling NetBIOS, but over the years I have never understood exactly when this protocol is required. The wikipedia page explains very abstractly what it is, but not which ...
1
vote
3answers
133 views

Understanding firewalls [duplicate]

I would like to understand how firewalls work in details, and understand the attack surface. TCP and UDP I understand that TCP and UDP are easy to filter. Programs on a computer need to ask the OS ...
0
votes
2answers
96 views

How to safely connect a possibly infected computer to my home's internet? [duplicate]

There is a laptop - not mine, someone else's. That someone else, as far as I know them, are a bit lousy in their security best practices (do they even have AV installed? not to mention OS patches or ...
14
votes
3answers
19k views

Pros and cons of disabling TCP timestamps

So, lynis informs me that I should unset net.ipv4.tcp_timestamps. I know that's a bad thing because an attacker could figure out which updates that require restarting the machine I haven't applied, or ...
0
votes
1answer
127 views

What do people mean when they talk about “hackers gaining access to our network” (at home)?

Have I fundamentally missed something between the time when I sat with my 486 IBM PC in the house, fully offline, and today? Do normal people actually set up complex local networks in their homes ...
0
votes
1answer
1k views

Analyze / Sniff all packets from all devices connected to a router

First of all, before explaining what I'm trying to do, let me clarify that my intentions are not steal any information, as it's only for study purposes, not even for my own entertainment. I'm trying ...
0
votes
2answers
106 views

Why do firewalls focus on tcp and udp?

From what I can see, most firewalls seem to focus on tcp and udp. Why is that? Is it impossible or at least very unlikely for malware to use other protocols/custom protocols?
21
votes
1answer
7k views

SFTP, FTPS and SecureFTP differences and security implications

What are the basic differences and security implications of using SFTP, FTPS and SecureFTP.
1
vote
1answer
210 views

Is someone trying to hack into my server?

I'm a cyber security student and don't do server stuffs on regular basis, I was just wondering how to check SSH login logs and found that it can be checked using sudo cat /var/log/auth.log and checked ...
0
votes
1answer
88 views

Is it possible to intercept and modify a wireless TCP transmission?

Given three parties (all in the same LAN): A client, a server, and a MITM. The client and server communicate wirelessly, and don't encrypt their messages. The MITM can see the messages, but question ...
0
votes
2answers
76 views

Is there anything I can do past SSL pinning to secure my connection? [closed]

My goal is to prevent man-in-the-middle (MITM) attacks through proxies. I've implemented SSL pinning, which has helped significantly, but I'm wondering if there's anything more I can do that's worth ...
0
votes
3answers
54 views

Can Router logs give us information of which apps are interacting with each other? [closed]

A friend of mine said he could know which apps are installed on certain device and which apps are interacting with each other through the router logs. Is that possible? Can the logs give such an info. ...
0
votes
1answer
128 views

Modifying host file versus firewall

I am trying to protect a macOS computer. Specifically, I want to prevent the machine from making unwanted connections over the internet. I am aware of firewalls of course. But I stumbled upon the idea ...
0
votes
0answers
70 views

Outside Router MitM Attack

I'm trying intercept my router's ACS requests which are behind HTTPS. I don't think my router validates certificates so it is possible to do a MitM attack. I'm using a debian installed laptop with two ...
-1
votes
1answer
139 views

Does OpenVPN encrypt my traffic between my computer and VPN server?

I set up my own VPN by installing OpenVPN on a Ubuntu server, then I download client.ovpn file from Ubuntu server to my Windows laptop. And then, I import that client.ovpn to OpenVPN GUI app on ...
1
vote
1answer
125 views

Attack that stops internet access for several minutes

I have a question that might sound a bit weird: A friend of mine (Person A) is being attacked by a former friend (Person B) and now person A asked me for help. Person A and Person B know each other ...
0
votes
1answer
73 views

Is each office having their own router coming off the main router as secure as each office having their own internet line

Company A owns a building and leases out 2 offices to other companies. Telecom 1 provides internet to Router 1 with ip address x.x.x.121 Company A connects their router, Router A, to it and gives it ...
0
votes
1answer
556 views

nmap - how can I input a target to nmap from a file with the netmask attached?

I have a c program that gets the router IP and netmask and puts it into a text file in the format of 192.168.1.1/24. When I issue the nmap scan command with the target text file I get the unable to ...
1
vote
1answer
73 views

What is the industry best practice for when 3rd parties are hit with ransomware? [closed]

I am interested to know if anyone has experienced this, what was the response and more importantly, is there best practices to handle these situations? My organization recently had a case where one ...
5
votes
1answer
200 views

Symbiote Counter-Attack Detection

I saw this video on YouTube about hacking Cisco phones (and other embedded systems) and I was overjoyed when the presenter not only hacked, but presented a security solution. Intrigued, I started ...
2
votes
0answers
93 views

Best practices or advice to convince IT admins not to map network drives in privileged sessions with users

We are currently trying to enhance the security posture of our company, and this means changing how some IT personnel work. Put precisely, our IT helpdesk currently have 2 separate accounts: 1 for ...

1 2 3
4
5
52