Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

Filter by
Sorted by
Tagged with
4
votes
2answers
3k views

Why is DHCP considered insecure?

Most places I've worked at consider DHCP to be a bad idea for management networks, or "secured" networks. I'm curious as to why that is. Consider this scenario... There is an ISCSI storage network,...
4
votes
2answers
9k views

Is it dangerous to disable the IPv6 firewall built into many home routers?

The router that my ISP has delivered contains an IPv6 firewall. The only configuration option is whether it is on or off. Apparently, this firewall simply denies all incoming connections. I ...
-2
votes
2answers
180 views

Accidently watched content against company policy while connected to work using RDP

I was at home and had some work to be finished so I used IE connected remotely to my work PC finished the job but forgot to disconnect. After a while I started watch not-safe-for-work material in ...
0
votes
0answers
152 views

Feasibility of using serial port/cable to act as a simple data diode?

I'm trying to determine the feasibility of using a serial port/cable to act as a simple and cheap data diode. I'll be connecting 2 Windows PCs (1 of which is on a secured network) using a 1-way null ...
2
votes
2answers
160 views

Wi-fi Certificate Permission and Access to phone/data

There are several questions addressing similar questions, but not quite the same (others ask about MITM Attacks). They also state conflicting and opposing answers/responses, so I ask here 3 specific ...
3
votes
3answers
712 views

Meterpreter shell and system shell define?

What is the difference between Meterpreter shell and system shell? For example, if I found some vulnerability in a system which allowed both shells, then what should I go for, system shell or ...
1
vote
1answer
178 views

How does Client-Side-Exploitation get the System-level-shell in Metasploit?

For example, if my client is using a vulnerable Internet Explorer which was vulnerable to the Aurora Vulnerability (I know its old and patch, but for now, let's assume) then I use Metasploit Client-...
2
votes
2answers
107 views

How to verify server ownership by public IP (without associated domain)?

Company A has a set of servers with public IP address but not associated with any domain. The servers contain confidential information, so company A doesn't want to give access to 3rd party. Company ...
1
vote
0answers
41 views

Is it possible to circumvent (ignore) routing table without root permissions?

The local host is configured to send all non-local traffic to a restrictive firewall VM configured in the routing table (route). Preliminary scanning shows that other routers are available on the ...
1
vote
2answers
176 views

How to scan allowed outbound (destination) ports on the local host?

Without access to firewall rules, I want to scan allowed outbound (destination) ports on the local machine. I would take too long to start a netcat listener for each of the destination ports on a ...
0
votes
3answers
1k views

Are there any feasible ways to block the stunnel utility at the network level?

The stunnel utility written by Michał Trojnara allows, if I understand correctly, to "wrap" non-SSL protocols (such as ssh) in an SSL connection. For example, imagine that all network ports on a ...
1
vote
1answer
245 views

Can a hacker pretend his IP as my IP in order to send requests to my server? [duplicate]

I am using Google-compute-engine and I have opened my Server to receive request only from a certain IP address and at the specified port by creating a firewall-rule and allowed only this IP, now in ...
-1
votes
1answer
1k views

Why should not run Metasploitable on bridge network?

I have read on somewhere that: "Do not run Metasploitable (an Intended Vulnerable Virtual Machine) in your Bridge Network." Why? Does it create a bridge to the attacker's system directly? If yes, ...
1
vote
0answers
740 views

Connection errors on hack the box and vulnhub (Kali, virtual box) [closed]

Ill start by show my attacking machine network setup: When trying to do a box on HTB or Vulnhub, I am sometimes able to ping it (nmap -Pn). Once I am able to ping a machine, I do a full nmap scan. ...
5
votes
1answer
194 views

How to eradicate and recover a compromised network

I have a somewhat broad question related to a specific, ongoing threat that I am trying to define and defend against. Right now, I need to rebuild a secure access point for my mobile devices and ...
0
votes
1answer
86 views

Are MAC addresses of hosts always visible to other hosts on a WLAN?

Is there a way of completely hiding one's MAC address so it does not appear in the ARP caches of other hosts? Or is periodically changing it the only solution to achieve anonymity with regards to a ...
1
vote
0answers
142 views

Is there any value to encrypting connections to localhost? [duplicate]

This is related to this question: Do I need to encrypt connections inside a network?, but I'm taking it a step further. We have an application that uses a lot of microservices that are hosted on the ...
4
votes
2answers
347 views

How does my ISP see information about my PC?

Recently I called my ISP and talked to them about a problem I experienced with a PC. They asked me "Are you talking about the PC that is connected in port 2 with X hostname?" It got me wondering how ...
0
votes
0answers
44 views

When using Symantec security, is our IP address our own or shared, should we whitelist?

The company I work for uses Symantec security. When I am connected to the network (by cable) I can see that my IP address is registered to Symantec. My question is, do other companies that are also ...
-1
votes
1answer
420 views

what would happen if port 22 and 23 are opened [duplicate]

what would happen if port 22 and 23 are opened
1
vote
0answers
2k views

can ping the server but not able to access [closed]

i am able to ping the server machine named "tallyserver" which is windows server 2003 machine configured with automatically IP address setting but when i am going to Network, sometimes it shows the ...
-2
votes
1answer
213 views

Create 2 separate networks at home [closed]

I am looking to increase the security of my home network as much as possible. An option I came across was to create two home networks. One would be used by less secure devices, and another for more ...
1
vote
0answers
131 views

Attack secure domain controller in environment with unique username/password combinations [closed]

I’ve already obtained local administrator on a domain user’s computer. Now, my target is one of the company’s domain controllers. However, the domain controllers run no vulnerable services, and every ...
1
vote
1answer
591 views

Is it safe to use unencrypted rsync when my backup is encrypted?

I've configured something usually advised against, but so far I have evaluated it seems perfectly safe to me. I'd like some opinions since playing with non-encrypted connections for my very sensitive ...
3
votes
1answer
50 views

UDP a logical choice for transmitting small amounts of data out of a secure network?

Just, in general, if someone needs to send data that is (1) never bigger than the payload of a UDP packet, (2) does not need to reliably get there, sending UDP packets is the logical choice? Even ...
2
votes
0answers
1k views

Using burp suite, how can I intercept traffic from one localhost port, but not another one

I have one webapp available on localhost:12345, and another service running on `localhost:6789'. I want to monitor the traffic to/from the webapp (12345), but universally pass the traffic to the ...
4
votes
4answers
1k views

Benefit of using two network interfaces for intrusion detection system

What is the benefit of using two network interfaces (management interface and sniffing interface) for an IDS such as Snort? I have used a Snort IDS where it only used one network interface for both ...
1
vote
1answer
43 views

Legal to Request Internal Network Information? [closed]

Is it legal to access information inside a private network such as a computer's name, IP address, MAC address, etc? I was told yesterday that a certain program used may be trying to get the name and ...
2
votes
1answer
595 views

How to “Scan for hosts” only using ettercap (“text”) terminal interface?

I've been looking for a command to "Scan for hosts" in terminal ("text") ettercap. Do anyone knows how to scan the local subnet from the ettercap terminal? The graphical ("gtk") ettercap has the ...
1
vote
0answers
40 views

How to secure unique identification of physical resources in a distributed system?

I'm attempting to build a mechanism to prevent frauds and provide traceability of physical resources in a distributed system. The idea is straightforward: the resource travels hop-by-hop on a network ...
-2
votes
3answers
134 views

Making websites use proxies? [closed]

Recently, I've been thinking about trying to make a website have a hidden ip, and make it so that it is extremely hard to find the real ip. I want to have it use proxies so that you can connect to the ...
2
votes
2answers
901 views

How can hackers do a tv signal intrusion?

How can hackers do incidents like the Max Headroom one? This is related, but it doesn't answer my question.
0
votes
1answer
3k views

bypass data limit [closed]

So as security student, I have been tasked with the challenge of trying to figure out a way of bypassing an ISPs data limit of 1GB . When the 1GB ceiling is hit the internet becomes really slow I ...
3
votes
3answers
4k views

Malware infection through phone call [duplicate]

Is it possible for someone to infect your phone/computer network with malware through a phone call if the phone is connected to said network as well?
2
votes
2answers
143 views

One way protocol with encryption without tcp

I am trying to brainstorm how I might either: 1) create a protocol (although against this option) 2) use an existing protocol That does the following: 1) allows 1 way communication from 1 node to ...
-1
votes
2answers
93 views

Is it possible for my Samsung S8+ to give a virus to a network just by using the WIFI? [duplicate]

Is it possible for my Samsung S8+ to give a virus to a network just by using the WIFI? My boss told me my phone could give the network a virus if i use the wifi. Is he full of it??
5
votes
2answers
534 views

Use mining to prevent DDOS attacks on websocket: Is this a viable solution?

I'm thinking whether the following way is a good way to completely and totally prevent ddos on my server. My idea is to use the same mechanism of cryptocurrency mining (bitcoin, with sha256 or any ...
2
votes
1answer
2k views

How does IPS terminate/decrypt encrypted traffic?

With regards to IPS, I am not completely across how they are supposed to terminate or decrypt encrypted traffic? It makes absolutely sense to deploy them inline, but how is traffic supposed to be ...
0
votes
1answer
113 views

What cipher mode is usually used for network traffic encryption?

I'm currently teaching myself about cryptography with the intentions of learning more about cryptanalysis. As of now I'm learning about cipher modes! I understand that I should be looking into CBC, ...
1
vote
1answer
186 views

Does OpenSSH use padding of random lengths?

According to the end of RFC 4253 § 6, the random padding introduced to each SSH packet is an arbitrary multiple of 8. It mentions that random padding lengths can mitigate traffic analysis: Note ...
1
vote
0answers
898 views

How did I got hacked? [closed]

What happened: Event 1 A few months ago I was working on my laptop (laptop1). During my activities, sometimes I saw a text selection, when moving my mouse. I thought this happend due to a bad key. ...
7
votes
1answer
5k views

What are non-standard ports and protocols [closed]

I am new to the security field and reading about how to check if an application is secure. One of the checks involves finding out if the app uses non-standard security ports and protocols. However, ...
-1
votes
1answer
244 views

What are some IDS/IPS that are able to detect stealth scans done in nmap today? [closed]

I was informed that these scans are no longer "stealth"
6
votes
2answers
3k views

Why is my Windows desktop using a DNS Server on localhost?

I recently inherited a corporate network and one of the devices kept having errors connecting to mapped network drives with errors pertaining to the server time being different than the computer's ...
-1
votes
1answer
580 views

Bypass Censorship and Filtering Using Blockchain Technology [closed]

I heard some people and companies (like Telegram) claiming it's possible to bypass censorship & filtering of internet using Blockchain technology, for example to prevent censorship of a certain ...
3
votes
1answer
115 views

TCP timestamps: available to whom?

I was told that an adversary can figure out system uptime by looking at TCP timestamps. But I'm not sure who exactly can see this information. For example, if I set up a hardware Tor gateway so that ...
3
votes
1answer
2k views

How to control the ciphersuites in nmap “ssl-enum-ciphers”

There is a script for enumerating the TLS versions and ciphersuites ofered by a server provided by nmap. See this link. Is there a way that allow me to specify the verisions and ciphersuites I want ...
0
votes
1answer
104 views

Should I report to abuse@ about network scans?

On one of my servers I run ssh on non-standard port, but still it was discovered by some botnet which is now trying to connect to my server (and, I believe, it scans Internet looking for ssh-enabled ...
1
vote
0answers
178 views

How can a management network be prevented from accessing network data? [closed]

I am designing a management network. As I am entering the network from a VPN into the management network, and considering that the device has a way to bridge between the networks, how can network ...
1
vote
1answer
435 views

Is it possible to run Responder and/or Layer 2 ARP Poisoning over OpenVPN or an OpenVPN Ethernet Bridge?

Situation: We usually perform penetration tests from Linux machines connected to the clients local network. However for this test the client wants the start point to be a windows machine and has thus ...