Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
0
votes
1answer
173 views

Is my credit card information “wide open to hackers” without VPN?

I saw an ad for a vpn provider recently where they claimed that, without using a vpn, my credit card information is "wide open to hackers" while shopping on-line. I guess the implication here was that ...
0
votes
1answer
56 views

How would you characterize a cyber surface? [closed]

Thinking through a network boundary characterization, say firewall/IDS flux. How some activity may change profile of that surface.
1
vote
1answer
130 views

Separation of devices for VPN / Firewall [closed]

Our company has two separate firewall devices from different vendors (Checkpoint / Cisco) for firewall and VPN access. We're currently evaluating the possibility of migrating to a newer, clustered ...
5
votes
1answer
844 views

Is my router spying on my network traffic?

I got a new TP-Link router a couple months ago, and configured it to use the OpenDNS domain servers for basic content filtering across all household WiFi devices. Everything seemed to be great. ...
0
votes
0answers
82 views

VDSL modem getting probed?

My ZyXEL VMG8924-B30A VDSL modem recently had these alerts in its log. The WAN IP address of the modem is 10.225.205.128. There was nothing like this before 1 May. What is this? 2019 -05 -01 T16:05:...
-3
votes
1answer
111 views

if i send a mail on protonmail and close account straight away is it trackable [closed]

I sent an email via protonmail. I then closed my account. Can you trace my email from this?
0
votes
0answers
54 views

In Kerberos authentication protocol, why is the TGT encrypted using the user's key Ka?

When the user first logs in, he fetches his TGT from the KDC along with the session key. I get why Sa (session key) is encrypted with Ka (user's key). But why is TGT also encrypted with Ka. TGT is ...
0
votes
0answers
62 views

Best Practices for Securing a network for Developers?

Asking as a developer: There seems to be a lot of tension between what developers want/need and what the Security Team would like to have locked down at a lot of development shops. Approved ...
0
votes
0answers
34 views

standards reference to perimeter security

I have the following problematic that I am currently dealing with. I have two zones/perimeters that need to be interconnected, some standards protocols have to be whitelisted such as HTTP, FTP, SSH ...
1
vote
1answer
118 views

Is it possible to prevent man-in-the-middle attacks in token-based authenticated online games without packets encryption?

I'm creating a home made MMO server (as a hobby / way to learn something new). I've decided to use a token based authentication for game traffic. Many people say that you shouldn't use any kind of ...
0
votes
1answer
108 views

Is it safe to login using HTTP on a WPA2 protected home network?

I have a small network infrastructure in my home on which I'm hosting some services such as a website, file server and such. Many of those services have an administration web interface which isn't ...
2
votes
1answer
386 views

What is an Albert sensor?

Recent news articles have started to talk about government networks deploying "Albert sensors" (e.g., this article). What is an Albert sensor? And how effective is it? Going purely from context, it ...
0
votes
2answers
143 views

Security of next generation firewall

In recent years there's been a number of IndieGoGo or KickStarter projects for smart device protection, or next-generation firewalls. Some examples are: Anonabox, Cujo, Dojo, Firewalla, Keezel, ...
0
votes
2answers
149 views

How do I list IP addresses a system is connecting to from its memory dump or OS image (obtained from FTK Imager)? [closed]

I'm looking for a tool that will enumerate the IP addresses that a system is connecting to. This is mainly for forensic purposes, to gather IOCs. I know we can run a netstat on windows, but would like ...
0
votes
1answer
58 views

Network diagram based on Cisco ACL and other firewall rules [closed]

Are there any tools for automated building network diagram from ACL rules or any other firewall rules?
1
vote
1answer
108 views

Kerberos replay attack within allowed range - authenticator won't prevent it?

In kerberos protocol the client, after receiving a ticket to the TGS server, sends a request to the TGS and adds an authenticator to the request. What if an attacker performs a replay attack within ...
1
vote
1answer
178 views

How could the Chinese Communications Authority find a backdoor on my website?

I host a legacy HTTP website on my own hardware in China. It was attacked due to the Struts file upload flaw last month. But yesterday, Communications Authority in my province alarmed me, there is ...
-5
votes
1answer
389 views

Monitor SSL traffic at home

There is an underage guest in my house for whom I will be legally responsible for the next few months and I'm concerned about some of his interactions online from some of the public postings I've seen ...
1
vote
1answer
129 views

Can a PC without VPN expose the public IP of another PC with VPN on the same local network?

Computer 1 is surfing the internet while using a VPN and at the same time accesses files on computer 2 (this computer does not have VPN) on the same local network. Since computer 2 does not have a VPN ...
0
votes
2answers
197 views

Can a school monitor my school laptop? [duplicate]

So i'm on my school computer right now at home, and I was wondering, if i'm at home on my internet connection, can my school use their monitoring app (DyKnow) and see what i'm doing, from my wifi?
0
votes
1answer
120 views

Possible risks of multicast

I noticed that a android in my network is constantly connect to Multicast DNS IP. I seen this because my firewall block this inbound connection. Other devices connects to that IP too, but this android ...
0
votes
0answers
46 views

What ISP know about my local network when I use their ONU?

I have FTTP (Fibre to the Premises) and a GPON ONU given to me by my ISP. I know they can see hostnames and MAC of devices connected in ONU. If I connect my personal router to this ONU and then ...
1
vote
2answers
892 views

Firewalls vs DMZ

What's the difference between Firewalls and DMZs? These terms seem to overlap at time and I'm not clear on the difference. Maybe a DMZ is achieved using firewalls?
1
vote
1answer
152 views

Could my boyfriend be hiding his encrypted emails inside of my inbox? [closed]

is it possible that my boyfriend could be hiding his encrypted emails inside of my email inbox with my email address and I can't read them? And if it if that is possible is there way that I can ...
0
votes
2answers
214 views

Bad Connections Blocked

With a new Windows 10 computer, McAfee Livesafe is reporting nearly 20,000 bad connections blocked. I ran some tests from Gibson Research, including the UPnP Exposure Test and the All Port Scan. The ...
1
vote
0answers
36 views

Trouble connecting to LAN card (Lantronix Micro125) [closed]

I am having a tough time connecting to a LAN card (Lantronix Micro 125 'Embeded Device Server'). I can ping it, but the software I have to use to reset the card won't find it and the card doesn't show ...
-1
votes
1answer
106 views

Can employer see your posting content on a public site when using their network on their hardware [duplicate]

Can the employer identify you as the person that posted on a website (you logged onto the system using their computer) if the computer is replaced by a new one?
0
votes
1answer
440 views

How a computer can infect others devices on the same network?

As I said in this post, my father is very careless about online security. Besides what I already said on that post, yesterday I saw in his android that the permission to install of third-party apps ...
0
votes
1answer
49 views

Testing Network layer encryption enabled or not

I am new to network security. I have a requirement to test whether the network layer encryption is enabled or not. How do I test this requirement? Are there any automated tools available?
2
votes
3answers
253 views

How to prevent an infected PC from infecting other machines on the same network? [duplicate]

My father is pretty careless about his security and this is not new. He even said to me that in the last year he used Tor to access some links just for curiosity because he read about it in some news ...
2
votes
1answer
86 views

Can we use network hub as an MITM sniffing device?

My intention is to analyze all network traffic which is coming to and originating from a network connected device I have. From the configurations of the device I am able to proxy all the HTTP traffic ...
0
votes
0answers
138 views

Google Home Hub Network Traffic on Port 8009

I noticed my desktop, that has never been used for anything related to google home or signed into the google account used to manage the Home Hub, that is on the same subnet was sending traffic to the ...
0
votes
0answers
127 views

Arpspoof not working properly

I'm testing MITM packet manipulation on the fly between two computers on the same switch, a layer 2 switch. I'm using a Kali Linux machine as the attacker and i have written a python script to ...
0
votes
2answers
419 views

Open ports on my NetGear router

I ran an nmap scan on my home router and I am seeing a ton of open ports. Is this normal? How do I go about closing them? $ nmap 192.168.1.1 Starting Nmap 7.70 ( https://nmap.org ) at 2019-03-16 20:...
3
votes
2answers
481 views

Does someone need to be connected to my network to sniff HTTP requests?

TL;DR Would a potential attacker need to have my Wi-Fi password and be connected to my network in order to read HTTP requests? Over the past year or so, I have made a few DIY home automation projects....
1
vote
1answer
472 views

Is it safe to use Orbot with the normal Firefox browser on Android

I noticed that when using Orbots "VPN Mode" that my normal Firefox browser works fine and when I visit check.torproject.org it says I'm connected even though I'm not using the Tor Browser specifically....
0
votes
0answers
22 views

Is this type of attack possible? [duplicate]

I'm wondering if it is possible for an attacker to spoof his IP address to look like mine. For example, in Facebook's connection logs, would it be possible for an attacker to log into my account while ...
1
vote
0answers
28 views

Nmap showing different open ports every few seconds [duplicate]

I'm running Nmap on an Amazon Web Services EC2 instance but between runs just a couple seconds apart, I'm getting new results. Is this normal? I'm seeing open ports then they don't show. I'm running ...
0
votes
1answer
123 views

Is using simultaneously a VPN on router and another on computer any good?

I know that the use of two VPNs on a machine is generally not advised for multiple reasons (security, stability, etc.) as well explained here : Connect through two VPN clients However I was wondering ...
2
votes
0answers
93 views

Loosing internet connection while connected to specific VPN server?

I have noticed a strange behaviour earlier today on my VPN on a specific server. When I run a trace route command while connected to VPN (on a specific countries server) my internet will not work for ...
3
votes
1answer
1k views

NMAP results inconsistent

I'm doing a NMAP scan that runs continuously. For some reason the results are not consistent. Sometimes it detects all the connected devices of the local network and sometimes only some of them. ...
1
vote
1answer
134 views

Is my VPN leaking or is this normal?

Hi when I am not connected to my VPN and do a route print I get one 0.0.0.0 entry in the Network Destination column. It has a gateway of 192..... When I connect to my VPN and do a route print I get ...
1
vote
1answer
174 views

Is it normal for my IPv6 to change?

My IPv6 is changing a lot, exactly three times in last three days (I saw on Microsoft's last activity), and all accounts that I keep login on my browser have disconnected. The actual IP is listed by ...
0
votes
1answer
42 views

Wifi usage and control [duplicate]

Can my messages and files either sent or received be seen by the wifi owner while am using their wifi? I am I'm some ones house and am using their wifi network for everything I do on Internet ...
0
votes
2answers
224 views

What are some examples of known scenarios of network attacks?

For example, it is possible that someone could spread malware with insecure wifi access point, but I don't realize how sending a bunch of network packets can result into a compromised computer if the ...
0
votes
1answer
57 views

Risk of giving untrusted IOT Device access to wifi

My issue isn't so common and I can't find an answer in the see of other IoT security issues. Let's say I have an IP cam, but I'm not even worried about someone being able to view the live stream, or ...
0
votes
0answers
29 views

How much VirtualBox device/ios emulator/blueStacks informatin can be logged/tracked by servers/ apps?

This question is intended to know if we can be tricked by Virtual devices emulators. How much logging information can servers/apps request to tell the difference? In the other word, Can we hide our ...
0
votes
0answers
157 views

Meterpreter Over HTTPS Proxy

I have a proxy server on the WAN as well as my box open to the WAN. I want this proxy server to (when it receives a shell), route it to my host so it can be the "man in the middle" between my ...
0
votes
1answer
112 views

Command injection with brace expansion

Does anyone have more experience with bash brace expansions when dealing with command injections that filters whitespaces? I am encountering most likely not a filtering engine, but an bad parsing ...
1
vote
1answer
31 views

Criteria for selecting fields and network protocols for fuzzing

I want to test a specific device connected to different networks using fuzzing. For each network interface, there are different services listening using different protocols, with open specification. ...