Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
1
vote
3answers
9k views

Why does P2P need port forwarding when behind NAT? [closed]

Correct me if I'm wrong, but for a node to participate in peer-to-peer, if it's behind NAT, it must port forward to be able to connect. Why is the port forwarding necessary? I know there are ...
0
votes
0answers
32 views

Secured Communication over a Private or Internal Network [duplicate]

We have a system where medical devices are connected to an internal network (Ethernet, TCP/IP stack). Data from the medical device needs to be transmitted to the server over this internal network. ...
0
votes
0answers
30 views

Is it possible to make a remote server part of VPN so that only machines within a domain network can access the server?

First, let me describe the problem I am trying to solve. I have a domain-based network. My Source Control server resides on this network. This meant only devices connected to the network (part of ...
0
votes
2answers
162 views

Where does tamper data extract the password string from?

I tried to login into Gmail account keeping the tamper data on. I just want to know from where does the tamper data get these field values. Is it stored anywhere in the cookies temp data. Where is the ...
0
votes
0answers
69 views

Does running a sensitive application in tmpfs provides enough protection against application theft in my use case?

I am thinking of running my C++ Linux application via a mounted tmpfs. The idea is to have application client running in the embedded Linux platform and download the main application from a secure ...
0
votes
0answers
38 views

How to prevent configuration of Public IP on an interface

I have recently identified a security risk with some of the machines (primarily Windows 10 and MacOS laptops) my company issues to users. Specifically, a small subset of the users are regularly ...
64
votes
11answers
127k views

Why block outgoing network traffic with a firewall?

In terms of a home network, is there any reason to set up a router firewall so that all outgoing ports are blocked, and then open specific ports for things such as HTTP, HTTPS, etc. Given that every ...
0
votes
1answer
59 views

Spoofed DNS answers ignored by target machine applications

Attacker: Arch Linux Target: Windows 10 Scenario The attackers launches an ARP spoof attack to redirect all target traffic to the attacker. (This works) The target sends DNS queries for domain name ...
1
vote
0answers
30 views

Creating a Secure Modern MMO From the Ground Up [closed]

MMOs have been around along time. As a result, there are lots of past attacks on MMOs that we can learn from and apply to a modern MMO. As a security novice, I was wondering if in today's climate you ...
0
votes
1answer
56 views

Connecting to server with Proxy vs VPN

Suppose I have a server and no-one can hack into my local area network. I want to Remote Desktop into my server from Internet. Exposing RDP is the most foolish thing I did do once and the server was ...
0
votes
0answers
35 views

Steps to secure unpatched devices behind home network

I have a few outdated and unpatched devices (e.g. Android tablet and network camera) that I'd like to use for "trivial" tasks like watching YouTube, reading PDFs, and being a baby monitor. Assuming ...
116
votes
5answers
174k views

Is it a bad idea for a firewall to block ICMP?

This question was inspired by this answer which states in part: The generic firewall manifest file finishes off by dropping everything I didn't otherwise allow (besides ICMP. Don't turn off ICMP). ...
0
votes
3answers
932 views

Easiest way to secure my home network from work pc

I am about to start a work at home position using a mac. I will be using my own personal internet to connect to their servers through their VPN. I want to isolate my work PC from accessing my home ...
3
votes
1answer
73 views

What risks exist when executing HTTP requests to user-submitted resources? [duplicate]

Context I'm working on an application where one of the features requires scraping metadata from resources available over HTTP/HTTPS. These resources are submitted by end-users in the form of a URL, ...
0
votes
1answer
41 views

If I join a war zone using an Ubuntu VM, can others on the war zone breach my network?

I am getting into the area of hobby exploitation on crack-me systems. So far, I have been playing through overthewire’s Bandit crack-me. One thing that interests me, overthewire has a war zone, which ...
5
votes
3answers
6k views

What are the security implications of net.ipv4.conf.eth0.route_localnet=1 / route_localnet?

sudo sysctl -w net.ipv4.conf.eth0.route_localnet=1 What are the security implications of route_localnet?
2
votes
2answers
307 views

Why does my MacBook air have so many MAC addresses, according to my router?

I am investigating some strange issues with my home network, and decided to have a look at my device history. I only have one Macbook Air, but my device history is showing ten, all with different MAC ...
0
votes
1answer
54 views

How do I restrict network access to websites using a monitoring system?

I am making a Java Project a LAB MONITORING SYSTEM for my University practical exams. Where a teacher or admin can monitor some selected computers and can give permissions to what the user at that ...
-1
votes
1answer
249 views

System Process PID 4 Attempt to connect to many risky IPs using local port 137 [closed]

I noticed in our APT solution that many endpoints in my company initiate connection attempts: Process initiate: system process PID 4 Remote risky IP 185.94.111.1 remote port: random remote ports ...
4
votes
2answers
693 views

What's the point of a DMZ if it has access to a DB inside inner network?

I understand that you place public facing servers in a DMZ and so if they are compromised, it doesn't compromise the inner network. In order to do so, the outer firewall forwards ports (80 and 443 in ...
1
vote
2answers
679 views

Is it possible to go undetected on a WiFi network?

How could someone go undetected on a WiFi? (No trace with NMap scan, not in network admin page) Is this even possible? If so, how can you prevent it? If being undetected while on WiFi network isn’t ...
0
votes
1answer
48 views

Using a WLAN router to create an access point

Would the local network administrator in my dorm be able to figure out that I'm using a WLAN router to access their wired internet connection? Assuming I'm not broadcasting the SSID.
0
votes
1answer
1k views

What is the difference between a jumpbox and a reverse proxy?

These two seem to be an intermediary for external network and internal network. What is the correct use for each deployment? What are their differences?
-1
votes
2answers
429 views

When connecting via SSH, does the Diffie-Hellman key exchange take place over an unencrypted TCP session or does encryption occur before the exchange?

I'm a cybersecurity student and I'm eager to understand the basic processes of an SSH session. I wrote down the stages to the best of my ability but need help understanding what happens right after ...
0
votes
1answer
202 views

Security benefits of disconnecting from corporate VPN when not in use

I worked for some companies that recommend cutting the VPN connection when not needed anymore while working remote. The VPN is just required to access internal sytems. Nobody could tell me why, ...
3
votes
2answers
244 views

Is it possible to spy on Tor browser within local network?

Imagine yourself connecting your personal device to your workplace wi-fi network. Can managers, network administrators, or some other person/potential attacker see my browser's activity if I'm using ...
0
votes
2answers
124 views

How to securely exchange a symmetric key over a unsecure netwrok

I need to build a project for uni where I need to transfer data securely from a client to a server. I can't use PKI structures and can't save pre-shared secrets (Imagine travelling to china and some ...
0
votes
0answers
13 views

Session Hijacking with remote server [duplicate]

Session cookie can help to bypass 2FA. Suppose victim and attacker are on same network without firewall. Attacker wants to steal victims login session. So attacker sends original login page over ...
2
votes
3answers
134 views

Phishing attacks with two factor authentication

Making our own phishing page isn't a big deal. Copying source code from website and modifying link just does our job. But what if we want to add phishing page for 2FA in the same code? Consider the ...
17
votes
3answers
15k views

Running windows in virtual machine, should I bother with security?

I'm running Windows in a virtual machine on my mac (via Parallels). Should I bother installing antivirus, firewall and using other conventional wisdom practices (like don't open unknown .exe etc)? I ...
0
votes
2answers
1k views

Installing xampp on virtual box?

I started learning PHP and I wanted to practice PHP code using xampp or wamp server. But after reading this and doing some google research,I thought that installing server software on my home pc ...
0
votes
0answers
33 views

Is possible to use promiscuous mode to sniff traffic between to devices connected by WiFi from another using Wireshark? [duplicate]

I've been read a lot about it, but I'm not 100% sure about it. The most clear response I've found is https://security.stackexchange.com/a/167845/163215 So, according to this, in this scenario: I ...
1
vote
0answers
65 views

When we should choose Virtual Private Cloud(VPC)?

Assume we build an application that has internal components (or microservices) on GCP (or AWS, Azure...). I guess there are 2 main security options: use VPC to protect internal communications. ...
1
vote
2answers
365 views

How to know if my router has been hacked?

I have a (maybe dumb) question for you. I was wondering if there is a way to know if my router has been hacked. I secured it the best that I can and also made it so only the mac addresses of the ...
0
votes
1answer
60 views

School tracking applications with a school computer [duplicate]

with school computers can the school track what apps you are using without being connected to that schools WiFi?
12
votes
3answers
44k views

Is NAT Loopback on my router a security problem?

Some DSL routers prevent NAT loopback. Security is sometimes cited as the reason. Is NAT loopback really a security issue? And if so, how is this exploited? NAT loopback... where a machine on the LAN ...
0
votes
1answer
117 views

Is there a way to lock down a network? [closed]

If supposing I discover that my network is being attacked by some hacker or is being compromised in any way and I am able to detect it. So, is there any software-oriented way of 'locking-down' the ...
-1
votes
1answer
65 views

Can cellphone packets be read by someone who only has your phone number?

I got an IM from a person I recently got acquainted with this year. In the text message, he asked me if I knew the name of the website you download free ebooks from (libgen.is) I found it really weird ...
0
votes
2answers
72 views

How to find the location of the device connected to router

Someone is using my wifi other than my devices, so i checked the connected devices in the d-link and found the ip address of the user and saved it. Now how do I find the location of the user?
3
votes
3answers
155 views

Is server startup time sensitive information?

Let's say we have a web server. Server startup time is the time the server process was started. Say, the startup time was being leaked via its response headers due to the carelessness of a ...
1
vote
1answer
63 views

Security team making the firewall opening, good pratice? [closed]

I'm currently requested in my enterprise to do myself (security team) the firewall overtures requests in TUFIN (firewall workflow), instead of our local IT team. it's for simplicity and saving costs. ...
3
votes
3answers
9k views

What is same site scripting and what are some exploit scenarios?

I know it is an issue with how DNS is configured , but is it really dangerous if the attacker couldn't access your network?
1
vote
0answers
74 views

How can I stop an authorized user from consuming all the bandwidth on my home network? [closed]

Me and my neighbours share a home network managed by me, paid for by the landlord. This person overloads the bandwidth on the regular, jitter spikes up to the 300s,down speed fluctuates, overall ...
7
votes
2answers
8k views

Is promiscuous mode sufficient to sniff packets in a wifi network?

I'm connected to my WiFi network and I want to capture and analyze packets that other clients are exchanging with the gateway. I don't want to modify the content of these packets and I don't need to ...
33
votes
4answers
5k views

How can we secure communication of an unchangeable app (Zoom)?

During the COVID-19 pandemic, many of us are working from home using meeting apps like Zoom. It's all over the news that Zoom is lacking in its E2E encryption. Let's assume we're using Zoom and can't ...
1
vote
0answers
46 views

Anonymous (privacy-preserving) random walk

Quoting this paper - SmartWalk (https://dl.acm.org/doi/pdf/10.1145/2976749.2978319): For graph privacy, strong link privacy relies on deep perturbation to the original graph, indicating a large ...
0
votes
3answers
4k views

Strange device in routers client list

Due to a high number of clients connected to one of my routers I recently changed it's password and reboot it. I also disabled WPS. The router is a ZyXEL Prestige 660. After the reboot the client ...
0
votes
0answers
601 views

System Process PID 4 Attempt to connect to Public IP using port 445

I was cross checking my environment and i found that System process PID 4 establishing Outbound connection to public IP using Port 445 is that a normal behavior? OS: Windows 10 1909 System PID 4 ...
0
votes
0answers
84 views

Is it a Bad Idea™ to open all IPv6 ports for devices in an isolated guest network?

At home I have a dual-stack IPv4/IPv6 broadband connection, and I also have a wireless access point. The access point currently bridges all traffic into my LAN, which is not segmented in any way, so ...
0
votes
0answers
62 views

Is it possible to gather information about a destination-nat host?

Let's say that I'm connected to a network where the ISP has setup a dst-nat from an IP they don't control to an IP that they control,like so: 1- Their DNS server resolves example.xyz to 1.1.1.1 (the ...

1
3 4
5
6 7
54