Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
0
votes
0answers
35 views

How do you secure your PC and Wifi at a shared office/co-working space like WeWork? [duplicate]

I'm fairly good with PC's but no expert. I'm at a WeWork (coworking) and connecting to WeWork's wifi network. There are a bunch of tech startups, so quite a number of people who could potentially ...
0
votes
2answers
620 views

WEP password cracking

I was testing WEP password cracking on my router. I had set a thirteen character password ("TESTING123456") and tried these commands: airmon-ng start wlan0 Then I started airodump-ng using this ...
4
votes
1answer
253 views

How were nuclear launch codes authenticated?

What is the history of authenticating nuclear launch codes? Were hashes used for verification? How would a nuclear launch base be able to verify that the code is correct, and how were new codes ...
0
votes
1answer
144 views

How can someone track work activity? [closed]

Problem: Recently we had an interesting thing which happened at work. My colleague was playing some Flash games at work and after some time someone from organization remarked about that and asked to ...
3
votes
3answers
1k views

Meterpreter shell and system shell define?

What is the difference between Meterpreter shell and system shell? For example, if I found some vulnerability in a system which allowed both shells, then what should I go for, system shell or ...
3
votes
1answer
2k views

NMAP results inconsistent

I'm doing a NMAP scan that runs continuously. For some reason the results are not consistent. Sometimes it detects all the connected devices of the local network and sometimes only some of them. ...
0
votes
1answer
6k views

Download Torrents on University network without detection [closed]

I want to download files using Bit-torrent, but I have heard that they can detect when someone is downloading torrents. How can they detect this? And are there any precautions I can do to prevent ...
2
votes
2answers
1k views

How do Cisco devices identify routers?

Our network administrators forbid the usage of private routers in our college. They bought new Cisco equipment (routers, switches) which detect routers and automatically ban them (it disconnects the ...
3
votes
6answers
2k views

What are the best pratices to avoid my server being port scanned

The title probably says it all. I just wanna know what are the best technics to avoid having a port scanner detecting open ports on my server. I'm using a Linux distro as my OS (Ubuntu Server).
0
votes
1answer
1k views

Google Chrome Linux with Activity of Unknown Device

I've recently noticed a strange comportment on my Google Chrome Browser with GMail, where suddenly appeared a connected Unknown Device, with a double connection and with the same IP than mine, looking ...
19
votes
3answers
5k views

How Can I Process Untrusted Data Sources Securely? [closed]

Here is the conundrum: At my current company, we process physical discs from numerous third party sources and extract the data from them to ingest to our own system. While we can generally trust the ...
2
votes
3answers
1k views

Local AP - Outside Router MitM Attack?

Let's say that we have our computer inside the local network. Our local network is connected to the Internet by AP+Router that connects to the router in other network which is connected to the ISP. ...
0
votes
1answer
164 views

PC turned on by itself and sending packages even when turned off

My father told to me that his PC has turned on by itself. I have no idea about what this can be, and this has never occurred before. After this, he turned off the PC and I checked my router, and seen ...
0
votes
1answer
205 views

DMZ an additional router

Recently I had an idea to test use a server (with ubuntu) and I need it to be accessible from the outside with port forwarding. I'm not often at home, but the internet provider doesn't like their ...
7
votes
3answers
13k views

Should I allow communication on public networks?

I apologize if this is a newb question. Reading this prompt, it appears that I should check Private Networks and uncheck Public Networks. However, Windows defaults to the opposite being checked. Am I ...
0
votes
4answers
139 views

Issues with using Usernames as PC Names

Our organization is looking on changing the naming conventions on our Admin PCs to make it easier for tech staff to remote into user machines. A current favorite idea is to pair user names with the ...
33
votes
8answers
121k views

Why is WPA Enterprise more secure than WPA2?

In personal mode WPA2 is more secure than WPA. However, I have read that WPA Enterprise provides stronger security than WPA2 and I am unsure exactly how this is achieved.
0
votes
2answers
226 views

Easiest way to secure my home network from work pc

I am about to start a work at home position using a mac. I will be using my own personal internet to connect to their servers through their VPN. I want to isolate my work PC from accessing my home ...
0
votes
2answers
315 views

Why is 0.0.0 an associate of 0.0.0.0? [closed]

When i redirected a single webpage to an address http://0.0.0, i also found that 0.0.0 is an alias of the network address, but since it is only 3 bytes, this seems to be strange. Why would chrome and ...
0
votes
1answer
106 views

Preventing host discovery in network

With tools such as Fing (Android app) and netdiscover (Kali Linux tool) its possible to get all connected devices in network. How it's possible to prevent host discovery in a network?
4
votes
1answer
232 views

Weird attack making my server CPU super high

I noticed that my server CPU is super high and the reason is grep "A" command After a deep look, that what I've found in my active internet connections list (netstat -tupn) tcp 0 0 ...
1
vote
1answer
165 views

Norton Security blocked “Fake Tech Support Website” within router?

Norton Security (software installed on the computer) supposedly blocked a fake website coming from my internet router. (See the full alert details window screenshot). My internet router is a BT Home ...
18
votes
4answers
9k views

Can an attacker sniff Mac addresses on a wifi?

If an attacker turns on wifi but doesn't have the security key to connect to an access point in range, can he still sniff packets that travel between the access point and clients connected to the ...
43
votes
3answers
49k views

What is the best home wireless network encryption algorithm to use?

What is the best home wireless network encryption algorithm to use? I realize the best answer will probably change over time, and hopefully people can provide updated answers as new standards come ...
1
vote
4answers
399 views

Is it insecure to publish the private IP addresses of my devices?

I'm interested in both IPv4 and IPv6, but more-so IPv6 because of how unfeasible it is to find valid addresses by just guessing-and-checking. Edit: My concern is that more trust may be given to IPv6, ...
4
votes
3answers
320 views

Is it dangerous to be within range of a compromised WiFi network, even if you don't connect to it?

If a network has been compromised (e.g. someone is listening on the traffic or there has been malware implemented on it), is it safe to leave a device (PC, cell phone, gaming device, etc.) in range of ...
68
votes
5answers
20k views

Is a 'dumbphone' mobile more secure for basic phone calls than a smartphone?

By dumbphone I mean: no internet connection, very limited features, etc. By more secure I mean: secure from malicious and direct hacking. I don't mean as in protected from government tapping/snooping;...
0
votes
0answers
78 views

Can telnet session be compromised via IP spoofing? [duplicate]

The scenario is following: A telnet server which has ACL implemented for telnet connections. A hacker spoofs IP and tries to connect to the telnet server. Consider that the hacker knows the ...
1
vote
1answer
91 views

Is there such a thing as a modern cable modem without an onboard operating system? [closed]

Is there such a thing as a modern cable modem without an onboard operating system? I’m looking for examples of specific models, in particular. Every modem I’ve looked at has a Web interface (e.g., ...
1
vote
1answer
107 views

MAC/IP address hiding

I am doing some experiments with wireless protocols on ns-3. What I want to ask is how can I hide MAC address/IP address, because I need it for my experiments? Is it possible to use encryption on ...
1
vote
1answer
105 views

Other computers/customers of my Internet Service Provider appears under my “Network” section in Windows Explorer

I could see many computers under "Network" section on the left sidebar of Windows Explorer, but I am the only one who uses computer on my home. So I suppose all those computers are also using the ...
0
votes
1answer
3k views

Can't connect to fake AP with airbase-ng

I use kali-rolling on a virutal machine and I try to set up a fake access point using airbase-ng, but my devices won't connect to it whatsoever. My steps are: I put my wirless adapter in monitor mode ...
2
votes
2answers
164 views

How can a malware retrive victim data without compromising the malware owner?

I was wondering how can malware, for example a keylogger, deliver its data without compromising its owner? Because as soon as you know you got a malicious program running on your computer you could ...
1
vote
1answer
160 views

Why might malware make a DNS request for an epoch time converter?

I am analyzing malware and I see that two executables when run in a sandbox made DNS requests for www.epochconverter.com Why would an attacker risk detection by making a network request to ...
1
vote
0answers
56 views

Why is generated different traffic for the same attack?

I created a scenario in VirtualBox (configured as internal network) with two machines: Windows XP and Kali Linux. I used ms08_067_netapi exploit from Metasploit and the payload windows/meterpreter/...
0
votes
1answer
268 views

Can I use a normal wifi adapter instead of a alfa card for evil twin attack?

I am new to security and more leaned on application security. But now I learning attacks like the evil twin I need an wifi adapter (correct me if I am wrong ) to do the attack. I live in a remote ...
6
votes
1answer
1k views

How to detect malicious code sending information to attacker's server in linux

Suppose you have some malicious code on your linux laptop, for example a rootkit or trojan or something like that. Now restrict your attention to the case that the malicious code does transfer some ...
21
votes
1answer
14k views

Is SOCKS secure?

In order to create a VPN, I open an SSH tunnel with a command like ssh -D 9000 user@host, and then I set my system's proxy settings to use SOCKS5 through localhost:9000. Well, setting up my home ...
0
votes
2answers
235 views

Malware spreading through jump server and SSH data transfer

Can someone explain to me how jump servers mitigate the risk of malware infection please? Whilst I understand some of the benefits of having a jump server as an extra layer of defence i.e. ...
0
votes
2answers
1k views

Do any open-source firewalls support remote management? [closed]

Remote management is essential if you have to run more than three network devices, and is supported by all commercial firewall products. For example: Palo Alto Networks: In addition to control ...
0
votes
0answers
56 views

How to decrypt wifi traffic in realtime and write it to file with Tshark?

I have Wireshark setup to decrypt and display packets in realtime. But I need to have them written to file in realtime also. Someone suggested Tshark, but I can only get it to write to file and not ...
0
votes
1answer
61 views

How to access a shared webhosting webpage without the domainname?

I would like to know how one can access a shared webhosted webpage without using the domainname. If i directly access the IP adress I get Apache is functioning normally I need to access it since the ...
3
votes
2answers
4k views

What are the advantages to using a VPN over secured/trusted wifi

It's often recommended that you should use a VPN when using unsecured or untrusted networks, such as open public wifi or secured wifi that you don't control. What are the advantages to using a VPN on ...
8
votes
1answer
9k views

NMAP - Closed vs Filtered

A lot of people seem to ask this question, as there are a bunch of posts about it; however I feel like none truly answer the question (that I have found). I want to understand why NMAP decides to ...
6
votes
6answers
35k views

Is there any solution for block the HTTPS traffic using URL filtering?

The URL filtering can block the HTTP traffic but not the HTTPS traffic in Internet Explorer. For example, the website http://www.facebook.com is blocked by the URL filtering while the https://www....
1
vote
3answers
229 views

Does running Windows XP pose a security threat to the whole internal network?

I have a laptop that is not capable of running any versions of Windows above XP reliably, but that I want to connect to use to browse web using the last version of Firefox available for Windows XP. I ...
2
votes
1answer
450 views

Did ZTE put a backdoor in my router? How can I remove it?

I have a ZTE router model ZXHN H198A. Recently, upon connecting to it with Telnet (with some default username-password, of course), I decided to go around the filesystem. Then I noticed that they ...
16
votes
3answers
1k views

What techniques and tools do you use to relate security events?

You have central logging going, detailed app logging/alerting (e.g. modsec), network based security alerting (e.g. snort), and whatever else feeding your observation deck. Do you have any cool ...
82
votes
10answers
112k views

Why do people tell me not to use VLANs for security?

I have a network, where a have a couple of VLANS. There is a firewall between the 2 VLANs. I am using HP Procurve switches and have made sure that switch-to-switch links accept tagged frames only and ...
0
votes
0answers
55 views

Why is the attacker allowed to create DNS traffic in a DNS cache poison attack?

According to this article, a DNS cache poisoning attack is performed the following way: Send a large number of resolution requests each spoofed with different source IP information for www....

1
3 4
5
6 7
51