Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
5
votes
0answers
201 views

How to send Wi-Fi management frames from macOS?

I realise that this question has been touched on before as linked here. However, none of the solutions suggested solved my question and it fails to answer the overarching question of how to send all ...
2
votes
1answer
370 views

Nmap --script-args usage?

I'm trying to use multiple Nmap --script-args at the same time. $ nmap -vv -p80,443 --script http-errors --script-args "httpspider.url=/,httpspider.maxpagecount=3,httpspider.maxdepth=1" website.com ...
-1
votes
1answer
872 views

Bypassing blacklisted MAC address filtering (that prevents certain MAC address to access router)

PROBLEM OVERVIEW I have a access to a large WLAN network (in a hostel); where lot of students have access to wifi password. So, to prevent sharing this password to others I used MAC address white-list ...
0
votes
1answer
115 views

How is my employer accessing my router when employer's laptop is wirelessly connected to my home network

I have a modem bridged to a modern router running open source software and heavily secured. I have all connections to the router through a personal vpn from a dedicated provider. During work from home ...
1
vote
1answer
454 views

Unable to establish shell with ncat over SSL

I am attempting to get a shell open between a Linux and Windows machine. On the Windows machine, I run: ncat --exec cmd.exe -vnl 4444 --ssl Once it is listening, I run the following command on my ...
3
votes
4answers
153 views

Asymmetric Encryption

I understand Asymmetric Encryption works by having the private key known only to your computer, while the public key is given by your computer to any computer that wants to communicate securely with ...
1
vote
2answers
234 views

How to find and ban some devices from my wifi using the command line? [closed]

I use Arch Linux. I just installed some packages such as nmap, netdiscover and others. It is a ubiquiti internet network, for the sharing of connection to several routers. There are about 7 routers ...
3
votes
2answers
282 views

How to prevent exam cheating in computer labs using remote access software

My home country trying to crack down on corruption in government job examination cheating. However, some party was able to bribe the lab that conducted the exam and put remote access software into the ...
0
votes
1answer
820 views

Is it advisable to accept STUN server connections?

My firewall reports outgoing connection attempts via com.apple.WebKit.Networking to a number of STUN servers (namely, stun.nas.net, stun.node4.co.uk, stun.voxox.com and stun.wwdl.net). This is ...
-2
votes
1answer
273 views

What is the difference between DNS flood attack and UDP flood attack?

As title says, what is the difference between DNS flood attack and UDP flood attack? Plus, do they only exhaust the network bandwidth or do they also exhaust the server-side assets such as CPU, ...
1
vote
1answer
72 views

How does Software Defined Perimeter (SDP) protect against certains attack that happen in the browser?

I have been doing a bit of research on SDP (Software Defined Perimeter) but it's still a bit unclear to me how it protects against certain types of attacks. On Wikipedia it says that it can protect ...
-1
votes
1answer
192 views

What is the Difference between TCP Syn discovery and TCP ACK discovery in NMAP?

when im using nmap for network discovery , i dont understand theses options PS PA PU n when i use -PS or PA or PU ? and what is the difference between them ? @ref: https://nmap.org/book/man-host-...
0
votes
1answer
504 views

Why adclick.g.doubleclick.net listens on all ports [closed]

I have adclick.g.doubleclick.net listening on all ports. When I launch an application like Starcraft 2, for example, it is listening on localhost. Or for some applications, there was a connection from ...
2
votes
1answer
220 views

Obtain NetNTLM/NTLM hash or login

In one CTF, I encountered a task that is solved by getting NetNTLM \ NTLM or just getting username. Tell me, please, is there any protocol that automatically sends NetNTLM / NTLM or username, when ...
80
votes
7answers
16k views

Company claims hardwire connections are a security issue

Someone to whom I am related is at a study camp for their desired profession. This person, let's call her Jane, is supposed to be studying rigorously for two months. The housing provided offers ...
78
votes
8answers
27k views

How is no password more secure than username+password?

Context: I have a laptop supplied by my organisation. I am trying to connect to eduroam, but I cannot do it using my organisation's laptop. When I use a personal computer, it asks me for a username ...
-1
votes
2answers
850 views

How to handle the virus on my router?

I believe my router is infected with a virus. If it is, it has been infected for a large period of time (perhaps a year or more). Though, I only started to consider it being a virus around a week ago. ...
2
votes
2answers
1k views

Windows Servers in DMZ - managed via AD or standalone?

From a security point of view, does it make sense to connect the Windows servers that are running within the DMZ and should be reachable from the Web to the AD (running within the core network)? Or ...
0
votes
1answer
405 views

Do vendors put backdoors on network devices?

There are several articles about "planting backdoors on network devices by vendors intentionally" , for example Hardware Vendor Offers Backdoor with Every Product. They found backdoors that were made ...
1
vote
2answers
143 views

Am I being Hacked? So many defferent ip's in router firewall logs [duplicate]

My router dsl light was not stable; It keept disconnecting and connecting..So I logged into Router Homepage to check whats wrong and found there were so many different ip's in Router firewall logs I ...
0
votes
2answers
448 views

I used a work VPN on my personal computer at home while doing…“non-work” things…am I in trouble/can they see me?

I was using my own home personal computer on a weekend while connected to my work's VPN (it's called pulse secure), and was bored so I decided to look at some "non-work" related websites (possibly/...
-4
votes
2answers
151 views

Get IP address of camera

Is it possible to get the global IP address of a nearby camera? For example, an IP camera that is connect to a network, but you are not on that network, and cant get access for whatever reason) but ...
1
vote
1answer
349 views

How to detect a scan on a local machine?

Is there any way to detect a scan on the local machine ( the pc that I'm using with a linux os -ubuntu-) from the network that I'm connected to? I know that for the webservers we could check the ...
0
votes
1answer
695 views

Meterpreter reverse shell alternative

What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
1
vote
1answer
2k views

Can Whatsapp be MAC spoofed if the victim's device isn't on the same local network as the hacker's device?

I realize that MAC addresses are only used to tell different devices apart if they are on the same local network. So, what if they're not? Is MAC spoofing in Whatsapp still possible? Even if the ...
1
vote
2answers
185 views

Should organisations allow their employees connect with a VPN software from their own laptops to their machine at work?

I saw a few breaches on a very large scale where an organization like JP Morgan suffered a huge breach just by allowing their employees to connect via VPN to their machines at work. Seems that hackers ...
0
votes
3answers
127 views

Security risks of exposing a VM to single IP address on the Internet

I have a small office network with about 10 workstations and a single physical domain controller. I want to move it to the cloud. For that, I deployed a Windows VM on Azure, which I'm going to promote ...
1
vote
0answers
46 views

Sudden spike in received traffic when connecting to the Tor Network [closed]

Recently when using Tails, I've noticed that the traffic suddenly jumps to over 1TB when establishing a conenction to the Tor network after booting. It doesn't show up in Total Received and also, for ...
0
votes
1answer
471 views

Does using a router connected to an unsecured WiFi network add security?

If I connect a portable router like GL-AR150 to a public, unsecured Wi-Fi network at a hotel and create my own private, password-protected Wi-Fi network, how much more secure is this compared to just ...
-1
votes
2answers
163 views

What's the stealthiest proxy program available? [closed]

If, theoretically, one was using a network that force-disconnects your device from itself if you are detected using a proxy (such as a network configured with Cisco Umbrella or similar), but a proxy ...
1
vote
0answers
40 views

Are parts of my system susceptible to IP based malicious attack even with effective IPtables rules?

Yesterday I installed Cent OS 6 and had to flush the default IPtables rules (IPtables -F) in order to access a web app via my browser. Having very little experience with Linux/Network security this ...
4
votes
1answer
176 views

Simple File Transfer Protocol

My SIEM has produced something intriguing. I went looking for unauthorized SSH connections, and looked for the SFTP protocol by mistake. I found a Windows web server that is connecting from port 80 to ...
1
vote
2answers
230 views

nmap -sn through proxychains fails

Why I can not do the following with nmap? proxychains nmap -A -v 10.185.11.0/24 Output: ProxyChains-3.1 (http://proxychains.sf.net) Starting Nmap 7.60 ( https://nmap.org ) at 2018-08-07 10:12 EEST ...
2
votes
1answer
229 views

Is IP address whitelisting useful if the IP address is not “secret”?

I'm working on an application that will have access to API keys supplied by our users. The application makes API calls on behalf of our users. The API we're using allows users to whitelist IP ...
2
votes
2answers
138 views

Is SSH security necessary on an internal network?

I am running a VM on a spare laptop we have in the office, and have set it up for SSH access from my workstation. Currently I am using user/password authentication, but I would like to remove the ...
4
votes
1answer
232 views

Weird attack making my server CPU super high

I noticed that my server CPU is super high and the reason is grep "A" command After a deep look, that what I've found in my active internet connections list (netstat -tupn) tcp 0 0 ...
1
vote
1answer
520 views

Could an attacker spoof a whitelisted IP to access the network?

There is a network that is protected with a firewall and only one IP is whitelisted. Assuming the attacker knows the whitelisted IP, what would prevent an attacker from sending traffic via a spoofed ...
2
votes
1answer
364 views

What is NetSpectre?

A new attack was revealed in a document titled NetSpectre: Read Arbitrary Memory over Network (PDF warning). I've seen a few non-technical writeups about the fact that it's a pretty slow attack: ...
1
vote
1answer
179 views

Data on VPS is safe, or can accessed on rent VPS Virtual Server?

I rent a VPS server for two months to test a webapp. I insert data into SQL on this server and want to host web app to this virtual server for test. Can that server owner that rents a VPS to me or ...
1
vote
1answer
86 views

Refusal to 'open' up corporate network?

I am working a project which requires access to a service running on a remote server, over a single TCP port (>1024). This service runs on a machine located within an existing network, and the project ...
5
votes
3answers
264 views

As “Head of IT” is it reasonable not to have access to Email or backup management as could contain sensitive information

I work for a medium sized company of around 100 people or so - and I am employed to be Head of IT responsible for backups, security, sorting out technical issues, among other things etc etc. However ...
3
votes
0answers
102 views

Why exactly are self hosted websites deemed that dangerous? [closed]

Up to now I'm using a raspberry pi as a local server for trying out things or hosting my own little projects (beginner level), but I want to make it publicly available (most likely only for people I ...
0
votes
1answer
997 views

Import Wireshark Cookies into Firefox?

I'm trying to copy session cookies (collected using Wireshark) into a different Firefox sessions. But can't seem to find a method or working add-on to manage the cookies. Greasemonkey and ...
0
votes
1answer
208 views

Infect Android device from inside the network without target knowing?

Is it possible to malicious some device in the same network without the user knowing? there some people use malicious apps but the problem is the user have to see the dialog box application ...
5
votes
3answers
9k views

Should I allow communication on public networks?

I apologize if this is a newb question. Reading this prompt, it appears that I should check Private Networks and uncheck Public Networks. However, Windows defaults to the opposite being checked. Am I ...
0
votes
1answer
2k views

Sniffing an outbound HTTPS packet - only intercepted by certain software, can't decrypt

I'm trying to sniff an SSL-encrypted outbound packet. It's sent by the game Mass Effect 3 to an EA web service. When I sniff packets with Nirsoft SocketSniff, I can see the packet (positively ...
0
votes
1answer
2k views

What -sn -Pn does in Nmap?

-sn: It tells the nmap not to do any Port Scan. -Pn: It tells the nmap not to do any Ping Scan. Now when I use both together like this, nmap -sn -Pn host.com. What I saw in the terminal is Nmap ...
3
votes
1answer
266 views

Why is TLS still commonly referred to as SSL? [duplicate]

I am developing in Visual Studio 2017 and I'm writing an asp.net core 2.0 web application. In the project properties there is a checkbox for Enable SSL. Any idea why this is called SSL instead of TLS? ...
0
votes
2answers
79 views

Internal IP's Probing to Unknown External IP's

I recently took a CEH class and they mentioned checking for internal IP's probing to External unknown IP's to determine an attack. What would be the best way to gather and analyze these types of ...
0
votes
1answer
184 views

Why do I have a specific route for this strange IP?

I use ubuntu. The only apps I have in it are firefox and telegram, both downloaded through official channels. I use other apps with virtualization, so my main machine is mostly clean. I use a VPN so ...