We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
0
votes
1answer
139 views

ARP poisoning NAC

I need some help in understanding the technique of Genians/Trustwave NAC regarding ARP poisoning. As seen here Bypassing Trustwave NAC, it looks like a good method, but I don't simply get it. With ARP ...
0
votes
1answer
108 views

How are victims targeted from outer networks (WAN)

I started getting more interested about security about one year ago, and from all the things I have learned up to this day I never knew how particular victims are targeted from the attackers from ...
3
votes
1answer
138 views

How do I know that the request and response is using encryption protocols in burp suite?

I know these things can easily be done on wireshark, tshark, etc but is it possible to know that the request I forwarded and the response I received is using protocols such as TLS, TLSv1.2, TCP, HTTP, ...
0
votes
0answers
32 views

Can my work's Wifi see the video I sent through Snapchat [duplicate]

So I accidentally sent a video over Snapchat at work using my works WiFi on my own personal device. To connect to the WiFi I have to put my work user ID and password in and I’m pretty sure some ...
-1
votes
1answer
65 views

If there is a way to use insecure USB-connected devices in a secure way

This is sort of like working in a lab with toxic chemicals. There is a way to work and wear certain special clothes so you don't get contaminated. Likewise, I wonder if when dealing with malware you ...
2
votes
1answer
58 views

Where custom auth source code fits into the micro-segmentation, zero-trust architecture

So micro-segmentation seems a bit of a buzz-word, but it helps in painting the picture of how to better do security in a network. Basically from what I understand divide the network into a bunch of ...
1
vote
1answer
196 views

Secure architecture for isolated printer network

I am very new to "networking" and security, but I realize that it would be more secure to have printers on their own "isolated network". How do I secure my networked printers? What kind of printers ...
0
votes
1answer
582 views

Google Chrome Linux with Activity of Unknown Device

I've recently noticed a strange comportment on my Google Chrome Browser with GMail, where suddenly appeared a connected Unknown Device, with a double connection and with the same IP than mine, looking ...
2
votes
1answer
193 views

How to go from wifi password to computer access

In looking at What can hackers do with a wifi password?, it is said: Simply said, if someone has your Wifi password, they have full access to all connected computers and devices within your network....
0
votes
1answer
96 views

Security implications of attaching a wireless printer to network

I am looking at these instructions which suggest basically giving the wireless printer your network password to configure it. I don't know enough about security or networks to know the implications of ...
0
votes
1answer
790 views

Analyze / Sniff all packets from all devices connected to a router

First of all, before explaining what I'm trying to do, let me clarify that my intentions are not steal any information, as it's only for study purposes, not even for my own entertainment. I'm trying ...
2
votes
1answer
206 views

Ransomware - All computers infected but one

Let's say there is a particular network which has a "monthly" successful cryptolocker attack. Every time, every computer in that network is infected. The set up is like this: 1x Windows 2003 server (...
1
vote
1answer
91 views

Is it possible to eavesdrop the wireless data transmission without being authorized to a router?

I read in computer security book that there are three places in wireless networking where you can be attacked: wireless transmission, access points and wireless network itself. The book illustrates ...
1
vote
1answer
268 views

WiFi name keeps changing but not by me

Over the last year I continue to get notifications that my WiFi has changed. I have xfinity and have changed my equipment twice and updated my settings to be more secure as follows: changed default ...
1
vote
1answer
1k views

OpenSSL - how to renew certificates in production?

Have a number of private network services deployed on different nodes outside of optionally encrypted mesh systems, like Docker or Consul. The services have high value and should communicate via TLS ...
1
vote
1answer
79 views

lan-side denial of service affecting target's CPU performance

Why does a LAN-side UDP flood take up the target's CPU resources and make it sluggish? i.e: the mouse doesn't respond properly, opening an application is slow... Note: The computers are both ...
2
votes
2answers
2k views

Airodump-ng : why are BSSID not associated?

Using airodump-ng with my wireless adapter in monitor mode, I am able to get expected scan to run. I have a few questions : Why do BSSIDs show as "not associated" (note: not all of them show as ...
0
votes
1answer
650 views

Double user-agent. Malware?

The place where I work sometime is receiving some alert from the NIPS stating : [1:30918:2] "MALWARE-CNC User-Agent known malicious user agent - User-Agent User-Agent Mozilla" The user-agent in the ...
0
votes
1answer
216 views

dhclient cloud-init /var/tmp process

There's a process that's running that I'm trying to investigate why its running and what its doing. The server is a Linux Ubuntu server running on AWS. Running 16.04. The process in question is: ...
0
votes
2answers
185 views

Find the process that queries a malicious domain every 2 minutes

I found suspicious traffic in a client a few days ago. A process in the client queries a malicious domain every 2 minutes. The domain is hostingcloud.science that hosts a javascript file for coin ...
1
vote
3answers
199 views

Does running Windows XP pose a security threat to the whole internal network?

I have a laptop that is not capable of running any versions of Windows above XP reliably, but that I want to connect to use to browse web using the last version of Firefox available for Windows XP. I ...
1
vote
0answers
32 views

How should I secure my database in Microservice architecture

Can someone tell me whether I should secure may connections to the database from my microservice? Should I worry about the communication between my microservice and database?
3
votes
1answer
395 views

Is it safe to open ports 80 and 443 in a home network

The intention behind this is that I'll be able to host a website from a home server (another pc with ECC ram etc.), but what worries me is that the network I'm using is also the same network which I ...
2
votes
2answers
209 views

What can someone do with (non-admin) command prompt on a network?

Say that an organization has a closed network - only its own computers can access it. Each of these computers has Windows 10 Enterprise. For obvious reasons, users aren't given administrator ...
1
vote
1answer
70 views

How is it possible that you can see connected clients of an WiFi without even connected with it?

Hey folks I have an small question about Network security. I was playing around yesterday with airodump-ng and saw that I was able to see that my other laptop is connected to that WiFi but how is it ...
1
vote
1answer
109 views

On-site Whitelisting vs. Off-site Cisco VPN

A company I’m applying to as web software tester is requiring me to be on-site so they could put me on their whitelist. However, I had a previous job which allowed me to work anywhere, using only ...
1
vote
2answers
158 views

Are botnet nodes made to stop working during office hours?

Some network guys at my work seem to think that a client that we monitor may be part of a botnet, but the spike in traffic that we see at night always stops at the latest around 8am in time for office ...
0
votes
1answer
88 views

Router vs router + switch security

I need to add some more ethernet devices to my network. I'd like to keep the current router and the only possibility to add more interfaces would be USB ethernet / PCI ethernet adapters. I could also ...
19
votes
4answers
5k views

Is strategic cyber-warfare feasible today?

Cyber attacks that target a nation's infrastructure are a documented fact and as such a danger that political and military leadership across the world needs to worry about and act proactively. These ...
2
votes
3answers
374 views

What are some best practices for WiFi security, in light of recently discovered vulnerabilities?

In the past few months, we've seen the revelation of several WiFi vulnerabilities (eg KRACK). It doesn't look like NIST has updated any of its best practices. How should we configure our enterprise ...
1
vote
1answer
287 views

Do I need two firewalls or is one enough?

We have a bunch of company devices (servers, desktops, laptops, company-issue phones, etc). All of these devices are company devices, every employee uses them just for business. All devices should ...
1
vote
0answers
32 views

Can a single domain be deleted from HSTS list through GPO

I have proxy performing a IWA authentication which intercepts the web request and redirects it towards the proxy's host name for auth. The redirect url is over http however the HSTS list on the end ...
0
votes
1answer
108 views

Spooky ISP settings

I recently switched to some local internet provider who is relatively a fresh boy in town. It is a wireless setup, with wifi antenna attached to a router in home. This is a fritzbox kid. I observed ...
4
votes
2answers
95 views

IPSEC connection attempt to rogue server — is my PSK compromised?

I am setting up an IPSec connection between two sites using Ubiquiti EdgeOS-based equipment. Using a DDNS service (a static IP is unavailable from the ISP), they can be found at east.example.net and ...
0
votes
1answer
64 views

Securely connecting a wifi client to an AP using a generated password

I have two embedded systems, one acting as an AP with WPA2 and the other as a client. The idea is for a user to connect their client to the AP without any setup, so the authentication will all be ...
0
votes
2answers
102 views

Logged into same network of residence, owner knows my Mac address.. what can they see? [closed]

Logged into same network of residence, owner knows my Mac address.. what can they see? They are techy and know my Mac address for my phone and PC. Can they see text message to and from me? My email? ...
2
votes
2answers
246 views

Can I see the MAC address of a router on an encrypted Wi-Fi network?

Say that I am within range of a Wi-Fi network that is encrypted using WPA2, but I don't know the password. Is it possible for me to learn the MAC address of the Wi-Fi router that is broadcasting the ...
3
votes
1answer
905 views

Potential router malware? Receiving “Access Denied” and other weird blocks from various websites

So I've been having some weird browsing behavior over the last few weeks and it's gotten a lot worse the last few days. I've been getting blocked/banned by various websites off and on. Here are a few ...
0
votes
1answer
124 views

For servers that are not internet facing, do they need to be authenticated to each other and should their communication be over HTTPS? [duplicate]

My gut instinct is that best practice would be to ensure that all internal servers communicate over HTTPS and that all servers are authenticated to each other. That would indeed be dream case ...
1
vote
0answers
119 views

Router detects my Nessus scan and kicks me off the network [closed]

I'm trying nessus on a public router. When I run a scan on the router at 10.0.0.1, the router somewhat detects it and proceeds to kick me off. If I put targets : 10.0.0.2-10.0.0.255 (scann all ...
2
votes
3answers
254 views

Linux tool for monitoring network activity by application

My laptop have been hacked a few months ago and my data is being to uploaded to some remote server without my knowledge. Is there a way I can find it out and prevent it from happening? I have ...
0
votes
1answer
59 views

How can I make my Windows Server accessible from another Windows PC over the internet safely, without using VPN?

First, some backrgound context as follows: I have a Windows Server 2008 running for my company. It contains an ERP, which is accessible by other computers/clients on LAN. During the client setup, the ...
1
vote
1answer
751 views

Default or Guessable SNMP community names: public

We have detected "Default or Guessable SNMP community names: public" vulnerability in one of our printer through Nexpose. The remediation states we have to secure SNMP installation. What does it mean ...
0
votes
1answer
117 views

Could an Smart TV be a threat for a hotel?

After some research I found that a Smart TV which is connected on the Internet could be vulnerable to threats such as monitoring, taking control of the tv etc. I wonder if a Smart TV which is used by ...
2
votes
2answers
103 views

What exactly does a default port scan look like? I am trying to run a default port scan without setting off the ids on my test network

What is the best option to use for a default port scan of a server on my test network without setting off the ids using nmap. -f is not a switch i am wanting to use.
1
vote
1answer
56 views

NAS with a public IP and multiple file sharing services – security concerns

I've ‘inherited’ (it's now my responsibility to take care of it) a WD My Cloud EX2 with a public IP and since it's exposed to the internet, I want to make sure that the data and other machines on the ...
0
votes
0answers
51 views

Detecting network attacks by processing individual or multiple network packets?

I am trying to create a tool that identifies network attacks using machine learning, something like a small intrusion detection system. I have collected benign traffic from the network and then ...
5
votes
1answer
77 views

Can I use `lsof` to reliably determine which local process has connected to my open port?

Say I'm running a server application on 127.0.0.1:7646 and a local process (possibly owned by a different user) connects to it, I can run lsof -Fp -i TCP@127.0.0.1:7646 -i TCP@127.0.0.1:<...
3
votes
3answers
258 views

Should I block IP adresses that made attacks attempts and were block from an IPS through the rules?

We have an NIPS blocking attacks based on bad behaviors (rules checking the data in the network packets). Should I block the IP that the NIPS linked to attack attempts? It feels like the NIPS is ...
3
votes
1answer
118 views

AWS Flowlog for Private Subnet Showing Routable IP's

When reviewing Flowlogs for a host on a private subnet in an AWS VPC that routable IP addresses are being rejected. How is that possible? I expect IP addresses from the private subnet could be ...