Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

150 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
1
vote
0answers
42 views

Are parts of my system susceptible to IP based malicious attack even with effective IPtables rules?

Yesterday I installed Cent OS 6 and had to flush the default IPtables rules (IPtables -F) in order to access a web app via my browser. Having very little experience with Linux/Network security this ...
1
vote
0answers
41 views

Is it possible to circumvent (ignore) routing table without root permissions?

The local host is configured to send all non-local traffic to a restrictive firewall VM configured in the routing table (route). Preliminary scanning shows that other routers are available on the ...
1
vote
0answers
40 views

How to secure unique identification of physical resources in a distributed system?

I'm attempting to build a mechanism to prevent frauds and provide traceability of physical resources in a distributed system. The idea is straightforward: the resource travels hop-by-hop on a network ...
1
vote
1answer
146 views

Disabling external DNS lookups - is this really so beneficial for security?

I have recently started working for a company which disables external DNS resolution from the machines inside the network by not adding external forwarders to the internal DNS servers - the reasoning ...
1
vote
0answers
167 views

scapy Deauthentication address understanding

I have the problem to understand from_DS, to_DS with Deauthentication packet, deauthentication packets are type=Managment, FCfield managment and control frames always FROM_DS = 0 , TO_DS=0, ...
1
vote
0answers
2k views

Nmap only detect virtual hosts and not physical hosts (maybe segmented network)

When my network settings is set to NAT and interface is eth0, this is the output of a simple nmap scan root@pc:~# nmap 192.168.0.0/24 Starting Nmap 7.60 ( https://nmap.org ) at 2018-03-04 18:47 EST ...
1
vote
0answers
100 views

Small data exfiltration protocol?

I have a small amount of data I want to send at regular intervals, such as from an IoT device. How would I design a network protocol or use existing protocols in such a way that my ISP cannot block ...
1
vote
1answer
370 views

SMSC spoofing attack

I attended a seminar on Telecom networks few day back and there I came to know how vulnerable our signalling network (SS7/ SIGTRAN) is. The speaker discussed an attack in which a spoofed SMSC is ...
1
vote
0answers
507 views

Replay attack in Wi-Fi (802.11) network

I am trying to create a small smartphone activated lock for my house via Wi-Fi. The setup is like this: The solenoid of the lock is connected to an esp8266 that acts as an access point, and has an ...
1
vote
0answers
229 views

Idle Scan with Windows 10 machine as a Zombie

I'm learning how to do an Idle scan and I'm practicing on my personal computers: I have a machine with port 21 open. I sent a SYN/ACK ping on the Windows 10 machine (the zombie) and I get x as the IP-...
1
vote
0answers
220 views

Exploit vulnerabilty in embedded Linux network stack to disable iptables

I own a D-Link DCS-7110 HD POE network camera. It features an apparently iptables based access list configuration where you can allow/disallow certain networks and addresses from accessing the camera....
1
vote
0answers
80 views

How should I manage wireless connections if using iptables?

I am implementing some modest iptables on xubuntu 17.04 and came across this blurb from IptablesHowTo Ubuntu WARNING: Iptables and NetworkManager can conflict. Also if you are concerned enough ...
1
vote
0answers
701 views

LDAP (Active Directory) Authentication from DMZ

I have a web application hosted in a DMZ on a non-domain server. The app is primarily an intranet site, but also needs to be available publicly. The app authenticates users using LDAP to the internal ...
1
vote
0answers
98 views

Manipulate EAP negotiation

The EAP method to use is suggested from the client to the server during the EAP negotiation. I'm trying to make the EAP negotiation ends on one specific EAP method (inner authentication included) of ...
1
vote
0answers
117 views

Force/Suggest the client to use one specific EAP method

I would like to suggest to the client which one EAP method and inner authentication to use. I'm using hostapd to create the AP. I've tried by removing some methods in the hostapd.eap_user but I ...
1
vote
0answers
61 views

Is this system of tracking users via Wi-Fi secure?

I am trying to make an app which will be used to track the presence of the users in a location, using the Wi-Fi hotspot of the location. The purpose is to know which user was at the location for how ...
1
vote
0answers
153 views

Bypassing Client firewall restrictions

Lets suppose we have 2 parties A(me) and B(participant). I want to communicate with B but B's firewall restrictions are not allowing me to communicate with him. Is there any way that I can bypass B's ...
1
vote
0answers
362 views

Samba or ldap-auth-client for LDAP authentication in Ubuntu client machines

We have around 100 employees using PCs, MACs and Linux machines (Ubuntu). I want to implement a central account and user authentication solution. I am planning to do it with Ubuntu machines first ...
1
vote
0answers
75 views

How to release a safe anonymous social network graph (raw data)?

There are multiple papers published by Arvind and Vitaly (De-anonymising social network) and other papers about de-anonymising social networks. In short, they used a network graph to deanonymise an ...
1
vote
0answers
273 views

Shellcode Injection/Poisoning on Mobile Networks[GSM/LTE/CDMA-varaints]?

In the previous question(How do APN hacks work?) I have enquired about APN hacks but after reseaching more about cellular networks. I wonder has anybody attempted Remote-code execution/poisoning,etc ...
1
vote
0answers
163 views

Snort&Suricata content replacement rule

I have to deal with Surikata IDS and its snort-compatible ruleset. Partially I need it in IPS mode for doing output traffic modifications. For now my "modifications" looks like this: ... pass tcp 192....
1
vote
0answers
47 views

Forwarding requests to known suspicious site to an isolated server

I keep getting IPS alerts for suspicious DNS requests for a known host with malware. I can't find anything from the Windows DNS logs from the domain controllers because it just shows the source ...
1
vote
0answers
804 views

Understanding remote OS detection using Scapy

I am trying to understand remote OS detection techniques using Scapy. I came across the following article SANS article on Remote OS detection using Scapy and have been trying to follow it. The ...
1
vote
0answers
113 views

Clustered Juniper devices using public DoD IP addresses for communication?

Ok, so I have to admit I am not an expert in how Juniper networked devices work, so this entire issue might be why I am having issues understanding something I am seeing on a pair of clustered SRX210H'...
1
vote
0answers
69 views

How can I diagnose what happened after a system was exposed to infection?

A system was connected to an already infected (or not secure) network and was used for few hours for normal use before the infection or hacking was detected. What things or steps should be taken to ...
1
vote
0answers
353 views

Metasploit to connect to a target behind NAT

During a pentest and I experienced a weird problem with connecting to the target machine which is behind a NAT network the scenario is basically, they have a public ip : 1.1.1.1 and there are ...
1
vote
0answers
230 views

Risks from network steganography

I happened to learn that there is an actively researched IT-security field named network steganography. Could experts give a short overview of the current state of affairs, especially about the extent ...
1
vote
0answers
219 views

Maximum limit of nping --rate option

nping - Network packet generation tool or ping utility. There is an option called --rate which send probes at a given rate. What is the maximum rate that can be sent? or What is the limitation of ...
1
vote
0answers
61 views

Does DSR or L3DSR allow for a secret back channel between hosts? How can it be stopped?

This Serverfault question describes how a load balancer can embed data that will be round-tripped back to the originating node. Traditionally DSR can't exceed the boundaries of a broadcast domain. ...
1
vote
0answers
247 views

How is webrtc leaking IPs from behind a protocol agnostic, full VPN?

I am using the sshuttle VPN. It's NOT a browser plug-in or a simple proxy - it is a protocol agnostic, full VPN that sends all traffic out of any host you can ssh login to. It creates a bridge0 ...
1
vote
0answers
538 views

DMZ with Reverse Proxy for both Web and Email servers

I have both a web server and email server, instead of placing these two "public" servers in the DMZ, instead In the DMZ I was going to place a Reverse Proxy. for the Web Server: Firewall accepts port ...
1
vote
0answers
413 views

Scapy problem in sending packet

I am trying to use Scapy for testing the network. Whenever I send a packet with commands like send, sr ,sr1 I get this message: python.exe has stopped working I am using Scapy 2.2.0 on Windows 8....
1
vote
0answers
70 views

Is there an easier way to test suricata has enough resources to run without losing packets?

I'd like to see the effect of changing my Suricata hardware and software, and in particular make sure I can determine the rate above which I'll start to lose data. I'm running ESXi with 20 cores and ...
1
vote
0answers
63 views

Is there a “smart cache” device which provides cache if authorized?

Is there an implementation of a HTTP (or decoded HTTPS) optimization device which would allow for "smart caching" - i.e. the ability to release some cached content (initially transferred by someone ...
1
vote
0answers
1k views

Peer Entity Authentication and Data Origin Authentication services in OSI layers

What kind of Peer Entity Authentication and Data Origin Authentication services are provided in network layer(L3), Transport layer(L4) and application layer(L7) ?
1
vote
0answers
229 views

SDN Security - why not attack the controller itself?

I have been looking into SDN (Software Defined Networking) and one advantage of using this is to be able to redirect traffic to stop DDoS attacks. The traffic is ultimately thrown away. My question ...
1
vote
0answers
183 views

Web/search engine spider on local network?

I was setting up a test webserver on my local network earlier, and whilst sorting out the firewall I noticed the following in the log (/var/log/ufw.log - I'm using UFW on Ubuntu 14.04): Jul 9 14:17:...
1
vote
0answers
55 views

Migration from TDM to All IP: any security issues?

My phone operator is slowly abandoning TDM (Time Division Multiplexing) to replace it with IP connections. What are the security risked related to this change? will all the phone line be like in a big ...
1
vote
0answers
394 views

Should I use a VM firewall or not?

I am managing a couple of VPS-es on an old platform I would like to no longer maintain. We used a widely used commercial VPS control panel to create the VPS-es in question. The customers may ...
1
vote
0answers
160 views

ARP poisoning question

I'm writing a program that detects ARP poiosoning. My question is: How can I b sure my LAN hasn't been poisoned? Yes, I can use my settings and find the IP address of the default gateway and yes I ...
1
vote
0answers
272 views

Is a direct SIP video call (encrypted) between two computers more secure than going through a registrar service?

I learned recently about ZRTP-encrypted video calls using an SIP client, such as Jitsi or Linphone or Blink. I was able to make a direct encrypted video call between two clients on the same local ...
1
vote
0answers
62 views

Key Distribution using multicast

I am trying to come up with a solution for a system where i need to generate a key (Kn) from time to time and distribute it to a large number of servers in a private network. Since it has to be a ...
1
vote
0answers
82 views

Local lan drive by download

Basically, I'm testing a local network, on which I'm able to use ARP spoofing. I now want to try and infect one of the Windows boxes on the network with a backdoor. I could inject an iframe into their ...
1
vote
1answer
263 views

Multiple Independent Levels of Security vs Multilevel security

I am looking for a way to isolate two different networks from each other. Suppose we have 2 different networks (public and private). I am looking for a way to connect to these two networks via a ...
1
vote
0answers
810 views

Proxy via pfSense and exclusions for DNS

I have posted this to NetworkEngineering.SE, as that seems the more suitable audience for this question. I will leave this question open here but am happy to see it closed. I just did not want to ...
1
vote
1answer
500 views

Unable to establish shell with ncat over SSL

I am attempting to get a shell open between a Linux and Windows machine. On the Windows machine, I run: ncat --exec cmd.exe -vnl 4444 --ssl Once it is listening, I run the following command on my ...
1
vote
1answer
565 views

Could an attacker spoof a whitelisted IP to access the network?

There is a network that is protected with a firewall and only one IP is whitelisted. Assuming the attacker knows the whitelisted IP, what would prevent an attacker from sending traffic via a spoofed ...
0
votes
0answers
54 views

Outside Router MitM Attack

I'm trying intercept my router's ACS requests which are behind HTTPS. I don't think my router validates certificates so it is possible to do a MitM attack. I'm using a debian installed laptop with two ...
0
votes
0answers
52 views

Open Ports at ISPs Gateway

I am working to set up OpenVPN access to my home network. To do this, I had to contact my ISP, because they had the necessary port blocked at the Gateway/Router that I do not have access to. In my ...
0
votes
1answer
117 views

I've sent a clear copy of my ID card using the WiFi at work

The title says it all, I needed to send my ID to some website so that they could verify my identity. But I took the picture with my phone, then sent it to myself via Messenger on iOS. I sent the ...