Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
4
votes
3answers
4k views

What does a switch do against a packet sniffing attack?

I have heard that using switches in my network helps prevent against a packet sniffing attack but how does it help prevent the attack?
0
votes
0answers
106 views

Meterpreter Over HTTPS Proxy

I have a proxy server on the WAN as well as my box open to the WAN. I want this proxy server to (when it receives a shell), route it to my host so it can be the "man in the middle" between my ...
3
votes
2answers
10k views

How do I know that my connection is really encrypted?

I am using a VPN to ensure to encrypt my traffic. I wonder though if I could check somehow if the datastream really is encrypted?
1
vote
2answers
2k views

Airodump-ng : why are BSSID not associated?

Using airodump-ng with my wireless adapter in monitor mode, I am able to get expected scan to run. I have a few questions : Why do BSSIDs show as "not associated" (note: not all of them show as ...
1
vote
1answer
177 views

Does OpenSSH use padding of random lengths?

According to the end of RFC 4253 § 6, the random padding introduced to each SSH packet is an arbitrary multiple of 8. It mentions that random padding lengths can mitigate traffic analysis: Note ...
0
votes
1answer
723 views

Man-in-the-middle attack detected by antivirus, how is that possible?

I have tried to perform a mitm attack on one of my pc's which has Eset antivirus installed. I tried to intercept http/https data by forwarding port 80 & 443 with iptables. Then I used arpspoof ...
1
vote
1answer
31 views

Criteria for selecting fields and network protocols for fuzzing

I want to test a specific device connected to different networks using fuzzing. For each network interface, there are different services listening using different protocols, with open specification. ...
2
votes
1answer
164 views

Truly Disabling Session Tickets in Windows 10 Schannel

In windows 7, session tickets were disabled by disabling schannel cache, example: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL] "EventLogging"=dword:00000004 "...
8
votes
1answer
16k views

How can I get the IP address for a Tor Hidden Service (HS) with a .onion address?

I'd like to find out the IP address of a given .onion address. Is it possible for me to simply assign an exit node (that I control) to my client and just monitor it to determine what IP address ...
41
votes
5answers
35k views

My WiFi network is replaced by another network. Am I being hacked?

To begin with, I am not very computer savvy. I am an older person with an older computer and a 2003 Windows XP using Google Chrome for a browser. (If anyone is old enough to remember when Windows ...
0
votes
0answers
96 views

IP blocking and TLS v1.3's Encrypted SNI

It is my understanding that TLS's version 1.3 would prevent censors or any other middlebox entity from knowing the SNI field and hence know what is traveling on the network, or which particular ...
0
votes
2answers
148 views

Is AWS subnets enough for segregation of networks? or do we need VPC?

Is AWS subnets enough for segregation of networks with the all security groups? or do we need VPC to really issolate two application from each other?
9
votes
1answer
4k views

How do I deal with a compromised network device?

I suspect that a network device (modem, router. switch, access point, etc) is compromised. What should I do?
0
votes
2answers
3k views

Why doesn't `nmap -sn 192.168.2.1/150` show the hosts that are up?

I wanted to know the hosts that were up on my network. So while working with Nmap I couldn't understand why using the command nmap -sn 192.168.2.1/150 it didn't want to tell me the hosts that were up, ...
0
votes
0answers
63 views

Pros and cons of extending L3 to the network edge (routed access layer)?

Scenario: Greenfield network rebuild for a SMB distributed over ~10 small campuses with 1 fairly large central campus spread over ~ 100 Miles. You have almost no Cap-ex budget restriction (within ...
0
votes
1answer
126 views

Do ISP’s in America keep IP assignment logs forever? [closed]

I read that the majority of ISP’s keep theirs for at least 180 days. However, does anyone know how long charter spectrum keeps theirs? Do ISP’s retain their logs forever even if they are using a DHCP ...
2
votes
2answers
5k views

SSL Finished message contents

I'm a little bit confused about the contents of Finished Message used during Handshake Protocol. In particular, this message (clientside) contains the connection-id originally sent from the server and ...
4
votes
3answers
250 views

Roommate Network

I'm living with some roomies that I sort of know and occasionally I use their internet. I'm pretty computer savvy but know very little about networks. None of them are too computer savvy and I have ...
0
votes
1answer
357 views

Ability to get a MAC address and IPv6 through proxy servers

Now I'm pretty sure I know the answer to this question, but I am just curious to see what the security experts of the world think of this. First a little back story: I was a former member of a ...
0
votes
1answer
119 views

Security auditing - disabling IP forwarding and ICMP packets redirects

I've recently started working as a security auditor and my mentor gave me some homework to write an Ubuntu security audit script so that I'll get to learn to use batch scripting and understand ...
0
votes
1answer
136 views

The Girl in the Spider's Web: SCSI hack?

In the movie, the main character is shown tapping into a network of surveillance cameras. She uses a SCSI connector which allows her to send the camera footage to a remote computer. I know it's a ...
23
votes
7answers
4k views

How can I publish data from a private network without adding a bidirectional link to another network

I was just wondering how I could build a private network where it is physically impossible to gain access from outside but still have the option to publish data to some remote server. As an example: ...
1
vote
1answer
163 views

WiFi name keeps changing but not by me

Over the last year I continue to get notifications that my WiFi has changed. I have xfinity and have changed my equipment twice and updated my settings to be more secure as follows: changed default ...
-1
votes
1answer
74 views

Can I spoof a specific AP of a network?

My college wifi requires a certificate installation and also is very unreliable. Therefore, I prefer using my mobile data when I am on campus. But the college has its own app for attendance taking and ...
3
votes
1answer
117 views

Retail shop got my email address and sent me ads based on my activities [closed]

I visited Germany this weekend and I didn't provide my email address to anyone or to any website while I was there, neither to any service related to my visit there. I never connected to public Wi-Fi ...
3
votes
2answers
1k views

How to connect a Raspberry Pi IDS to the home router to detect intrusions network wide?

I'm configuring a raspberry pi IDS/IPS with ELK stack on a separate machine, my problem is to connecting it to the router in a way it can read traffic on the whole network and drop the suspicious ...
3
votes
1answer
127 views

How do I know that the request and response is using encryption protocols in burp suite?

I know these things can easily be done on wireshark, tshark, etc but is it possible to know that the request I forwarded and the response I received is using protocols such as TLS, TLSv1.2, TCP, HTTP, ...
1
vote
0answers
42 views

UDF Client, Socket Binding and Tags Hack - Need Help [closed]

Background For a long time now, I've been working to remove a persistent, if not permanent, malware presence on my computers and phones. Every attempt at removal has been unsuccessful to date, by me ...
1
vote
1answer
174 views

Secure architecture for isolated printer network

I am very new to "networking" and security, but I realize that it would be more secure to have printers on their own "isolated network". How do I secure my networked printers? What kind of printers ...
3
votes
2answers
244 views

Is it dangerous to connect to a public unsecure wifi network a few seconds before connecting to a vpn?

This might be common sense but I just can't seem to get it. I purchased a vpn subscription for security ( I travel a lot therefore I am dependent of public wifi networks ). I have configured all the ...
0
votes
3answers
3k views

Is it possible to get Network Domain from Client with PHP or Apache? [closed]

I'm working on a solution to identify client Network Domain or Workgroup in a private network. Based on it, I must change some access permissions. I can't do that through IP address because it isn't ...
0
votes
1answer
104 views

How are victims targeted from outer networks (WAN)

I started getting more interested about security about one year ago, and from all the things I have learned up to this day I never knew how particular victims are targeted from the attackers from ...
0
votes
0answers
32 views

Can my work's Wifi see the video I sent through Snapchat [duplicate]

So I accidentally sent a video over Snapchat at work using my works WiFi on my own personal device. To connect to the WiFi I have to put my work user ID and password in and I’m pretty sure some ...
6
votes
2answers
2k views

Why is my Windows desktop using a DNS Server on localhost?

I recently inherited a corporate network and one of the devices kept having errors connecting to mapped network drives with errors pertaining to the server time being different than the computer's ...
1
vote
1answer
245 views

OpenVPN one account multiple servers & Load Balancing

I have recently been experimenting with OpenVPN. My aim is to create a group of servers in different locations with a single username and password for each user stored in a central database. For ...
-1
votes
1answer
65 views

If there is a way to use insecure USB-connected devices in a secure way

This is sort of like working in a lab with toxic chemicals. There is a way to work and wear certain special clothes so you don't get contaminated. Likewise, I wonder if when dealing with malware you ...
2
votes
1answer
184 views

How to go from wifi password to computer access

In looking at What can hackers do with a wifi password?, it is said: Simply said, if someone has your Wifi password, they have full access to all connected computers and devices within your network....
0
votes
1answer
66 views

Security implications of attaching a wireless printer to network

I am looking at these instructions which suggest basically giving the wireless printer your network password to configure it. I don't know enough about security or networks to know the implications of ...
17
votes
5answers
4k views

Why don't ISPs filter on source address to prevent spoofing?

I'm under the impression that if all the ISPs were required to filter on the source IP address of all outbound packets, that spoofing would be reduced considerably. Are any ISPs implementing this ...
1
vote
1answer
1k views

OpenSSL - how to renew certificates in production?

Have a number of private network services deployed on different nodes outside of optionally encrypted mesh systems, like Docker or Consul. The services have high value and should communicate via TLS ...
2
votes
1answer
355 views

What is NetSpectre?

A new attack was revealed in a document titled NetSpectre: Read Arbitrary Memory over Network (PDF warning). I've seen a few non-technical writeups about the fact that it's a pretty slow attack: ...
1
vote
1answer
89 views

Is it possible to eavesdrop the wireless data transmission without being authorized to a router?

I read in computer security book that there are three places in wireless networking where you can be attacked: wireless transmission, access points and wireless network itself. The book illustrates ...
1
vote
1answer
187 views

Communication between two open endpoints, is this secure enough?

I'm building a (very simple) tool to communicate between two servers. I started by asking if there was a better alternative than making a home made scripts and we came to the conclusion that for ...
1
vote
3answers
270 views

How to protect my network against local flood attacks?

I installed VM centOS 6.8 then I installed hping3 tools. With this tool, I can take down any PC connection on the network as well as increase CPU and RAM usage with the following command hping3 --...
0
votes
1answer
548 views

Double user-agent. Malware?

The place where I work sometime is receiving some alert from the NIPS stating : [1:30918:2] "MALWARE-CNC User-Agent known malicious user agent - User-Agent User-Agent Mozilla" The user-agent in the ...
0
votes
2answers
165 views

Find the process that queries a malicious domain every 2 minutes

I found suspicious traffic in a client a few days ago. A process in the client queries a malicious domain every 2 minutes. The domain is hostingcloud.science that hosts a javascript file for coin ...
6
votes
3answers
6k views

How do RATs access computers through routers?

I've started trying to increase my networking security at my house. One thing that worries me (because other people in the house are always downloading viruses that come along with "free" games) are ...
4
votes
3answers
22k views

How to use nmap through proxychains?

I am running nmap through proxychains using this command: proxychains nmap -v scanme.namp.org This produced an error: root@kali:~# proxychains nmap -v scanme.nmap.org ProxyChains-3.1 (http://...
1
vote
0answers
32 views

How should I secure my database in Microservice architecture

Can someone tell me whether I should secure may connections to the database from my microservice? Should I worry about the communication between my microservice and database?
3
votes
1answer
328 views

Is it safe to open ports 80 and 443 in a home network

The intention behind this is that I'll be able to host a website from a home server (another pc with ECC ram etc.), but what worries me is that the network I'm using is also the same network which I ...