Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

146 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
0
votes
0answers
46 views

How to decrypt wifi traffic in realtime and write it to file with Tshark?

I have Wireshark setup to decrypt and display packets in realtime. But I need to have them written to file in realtime also. Someone suggested Tshark, but I can only get it to write to file and not ...
0
votes
0answers
53 views

Why is the attacker allowed to create DNS traffic in a DNS cache poison attack?

According to this article, a DNS cache poisoning attack is performed the following way: Send a large number of resolution requests each spoofed with different source IP information for www....
0
votes
1answer
215 views

Does SSLSTRIP in MITMF only works when the victim visits for the first time?

I just started learning MITM attacks and I use MITMF to perfom these attacks. I have one question regarding to sslstrip. I notice that sslstrip only works when we first clear the cache and history in ...
0
votes
0answers
246 views

Isolate devices on the same network

I asked a similar question on this topic and some guys recommended use VLANs or guest network, so I asked to a friend and he will give to me a router with guest network function. However, there is a ...
0
votes
0answers
57 views

Network Breach - Possibility

Hypothetically, if someone had unauthorized access to my network, there are a lot of things that can happen, depending on the point of attack and how it accessed, I can assume that anything that is ...
0
votes
0answers
82 views

VDSL modem getting probed?

My ZyXEL VMG8924-B30A VDSL modem recently had these alerts in its log. The WAN IP address of the modem is 10.225.205.128. There was nothing like this before 1 May. What is this? 2019 -05 -01 T16:05:...
0
votes
0answers
54 views

In Kerberos authentication protocol, why is the TGT encrypted using the user's key Ka?

When the user first logs in, he fetches his TGT from the KDC along with the session key. I get why Sa (session key) is encrypted with Ka (user's key). But why is TGT also encrypted with Ka. TGT is ...
0
votes
0answers
62 views

Best Practices for Securing a network for Developers?

Asking as a developer: There seems to be a lot of tension between what developers want/need and what the Security Team would like to have locked down at a lot of development shops. Approved ...
0
votes
0answers
34 views

standards reference to perimeter security

I have the following problematic that I am currently dealing with. I have two zones/perimeters that need to be interconnected, some standards protocols have to be whitelisted such as HTTP, FTP, SSH ...
0
votes
0answers
46 views

What ISP know about my local network when I use their ONU?

I have FTTP (Fibre to the Premises) and a GPON ONU given to me by my ISP. I know they can see hostnames and MAC of devices connected in ONU. If I connect my personal router to this ONU and then ...
0
votes
0answers
138 views

Google Home Hub Network Traffic on Port 8009

I noticed my desktop, that has never been used for anything related to google home or signed into the google account used to manage the Home Hub, that is on the same subnet was sending traffic to the ...
0
votes
0answers
127 views

Arpspoof not working properly

I'm testing MITM packet manipulation on the fly between two computers on the same switch, a layer 2 switch. I'm using a Kali Linux machine as the attacker and i have written a python script to ...
0
votes
0answers
29 views

How much VirtualBox device/ios emulator/blueStacks informatin can be logged/tracked by servers/ apps?

This question is intended to know if we can be tricked by Virtual devices emulators. How much logging information can servers/apps request to tell the difference? In the other word, Can we hide our ...
0
votes
0answers
157 views

Meterpreter Over HTTPS Proxy

I have a proxy server on the WAN as well as my box open to the WAN. I want this proxy server to (when it receives a shell), route it to my host so it can be the "man in the middle" between my ...
0
votes
0answers
102 views

IP blocking and TLS v1.3's Encrypted SNI

It is my understanding that TLS's version 1.3 would prevent censors or any other middlebox entity from knowing the SNI field and hence know what is traveling on the network, or which particular ...
0
votes
0answers
88 views

Pros and cons of extending L3 to the network edge (routed access layer)?

Scenario: Greenfield network rebuild for a SMB distributed over ~10 small campuses with 1 fairly large central campus spread over ~ 100 Miles. You have almost no Cap-ex budget restriction (within ...
0
votes
1answer
63 views

network icon on lock screen, group policy

In an office setting, where it is an open space design, should I ensure that the laptop has 'Do not display network selection UI', enabled? Why or why not
0
votes
1answer
144 views

ARP poisoning NAC

I need some help in understanding the technique of Genians/Trustwave NAC regarding ARP poisoning. As seen here Bypassing Trustwave NAC, it looks like a good method, but I don't simply get it. With ARP ...
0
votes
1answer
861 views

Analyze / Sniff all packets from all devices connected to a router

First of all, before explaining what I'm trying to do, let me clarify that my intentions are not steal any information, as it's only for study purposes, not even for my own entertainment. I'm trying ...
0
votes
1answer
227 views

dhclient cloud-init /var/tmp process

There's a process that's running that I'm trying to investigate why its running and what its doing. The server is a Linux Ubuntu server running on AWS. Running 16.04. The process in question is: ...
0
votes
0answers
51 views

Detecting network attacks by processing individual or multiple network packets?

I am trying to create a tool that identifies network attacks using machine learning, something like a small intrusion detection system. I have collected benign traffic from the network and then ...
0
votes
0answers
149 views

Feasibility of using serial port/cable to act as a simple data diode?

I'm trying to determine the feasibility of using a serial port/cable to act as a simple and cheap data diode. I'll be connecting 2 Windows PCs (1 of which is on a secured network) using a 1-way null ...
0
votes
0answers
44 views

When using Symantec security, is our IP address our own or shared, should we whitelist?

The company I work for uses Symantec security. When I am connected to the network (by cable) I can see that my IP address is registered to Symantec. My question is, do other companies that are also ...
0
votes
0answers
44 views

How can third-party VPN applications tunnel all traffic of all processes on sandboxed operating systems?

How can (third-party) VPN applications tunnel all communication of all processes on sandboxed operating systems (such as OSX, etc)? Can they access the traffic of other apps and redirect them? Why is ...
0
votes
0answers
333 views

how to use snort to track http/https sessions separately?

how can I use snort to breakdown http/https traffic into separate sessions and track each session separately and also dump them into separate log files or something that I can read from.
0
votes
0answers
46 views

encrypting traffic from legacy devices

I have a deployment of a few hundred meters that I'm walking into and all traffic is required to be encrypted with TLS. The manufacture of the meter will not update these meters to include an ...
0
votes
0answers
32 views

Trustsec security

I am researching a bit on Cisco's Trustsec technology. My understanding is that it places a tag on packets based on machine and/or user ID. Trustsec can then use that tag as it traverses the network ...
0
votes
0answers
78 views

How to identify additional resources when pivoting

I'm currently looking into pivoting when performing network penetration tests, but I'm having issues with reconnaissance. Given the scenario I have full control over a server, which is publicly ...
0
votes
0answers
352 views

Firewall source and destination IP validation

For an external firewall interface, why is it a good idea to validate that the source IP address was initiated from an internal IP, or why it originated from an external IP? If, hypothetically, the ...
0
votes
0answers
220 views

Windows : security of USBNET / RNDIS

I'm having trouble finding documentation about how to setup any security for RNDIS or if the system is already secure enough. For those who doesn't know RNDIS is a protocol that permits a USB ...
0
votes
0answers
141 views

Secured router bridged with a less secure router

I have a router provided by my ISP physically connected to the internet access point. It has basic security (WPA2-PSK) and broadcasts its SSID. I have a second router bridged wirelessly to the first ...
0
votes
0answers
199 views

VPN Server Inside VPN client on Router

This is a different context of an already asked question: In a few words: Sub-VPN or VPN SubNetwork... VPNsception? So I am using DD-WRT flashed router which connects as a client to VPN server "...
0
votes
1answer
51 views

Finding how many filtered ports of a host that would be listed as “filtered” on Nmap

I just started working on nmap and was confused by this question. I'm unsure if I understood it correctly, so I appreciate your help with this. Using Nmap, find how many ports are filtered in testphp....
0
votes
1answer
3k views

Can't connect to fake AP with airbase-ng

I use kali-rolling on a virutal machine and I try to set up a fake access point using airbase-ng, but my devices won't connect to it whatsoever. My steps are: I put my wirless adapter in monitor mode ...
0
votes
1answer
397 views

Internal Pen testing - Can't get SMB Relay attack to work?

Using Responder to capture NTLMv2 hashes on LAN using kali and relay them to the smbrelayx.py module from Impacket. I understand I have to change the config file in Responder to set the SMB and HTTP ...
0
votes
1answer
49 views

Unsecured Guest access on Macbook Pro

I am concerned that my personal, home based Macbook Pro guest network access may be being used by an outside source. Is there a way for me to identify user access, time logged in / out, etc?
0
votes
1answer
154 views

Designing and implementing a secure epayments system with RESTful API

I want to design and implement an epayments system (I will not be handling credit card payments). The system will have a RESTful API. I am already familiar with RESTful servies, and have built a few ...
-1
votes
1answer
97 views

Can I spoof a specific AP of a network?

My college wifi requires a certificate installation and also is very unreliable. Therefore, I prefer using my mobile data when I am on campus. But the college has its own app for attendance taking and ...
-1
votes
2answers
147 views

Can it be traced that I connected to wifi after I have disconnected?

Yesterday I connected to the wifi at a friends house through my cellphone. After I have disconnected, can it ever be traced that I used the wifi?
-1
votes
1answer
215 views

Is my computer safe after accessing .onion sites without VPN?

After watching a youtube video about .onion sites and I got Tor and just went on one without clicking any of the links. Then I got off Tor and that was pretty much it. But I've read an article about ...
-1
votes
2answers
457 views

Get PMK from Handshake

Is there a way to get the PMK from a .cap file containing the 4-way-handshake of a wifi network. I want to get it to compare it with a long list containing pre-compiled PMKs
-1
votes
1answer
212 views

How PPP with CHAP for Cisco works

I'm learning to configure a simple PPP link with CHAP authentication for two Cisco routers. I'm trying to make sense of how router makes sense of the configuration in this example, as the logic of ...
-1
votes
2answers
6k views

Kali Linux/Metasploit in VirtualBox - Issue with ports

I've been attempting to get port 4444 to open these past couple of days. I finally figured I'd try to get it working on my Windows machine first and I finally got it. Now, no matter what I do in the ...
-1
votes
1answer
65 views

If there is a way to use insecure USB-connected devices in a secure way

This is sort of like working in a lab with toxic chemicals. There is a way to work and wear certain special clothes so you don't get contaminated. Likewise, I wonder if when dealing with malware you ...
-2
votes
1answer
66 views

What is the term to describe “Transitivity” in network security?

If A's security is breached, while A and B are in the same network, then B's security is breached. I can imagine this could happen to computer networks, but also to social networks; for example if ...
-4
votes
2answers
151 views

Get IP address of camera

Is it possible to get the global IP address of a nearby camera? For example, an IP camera that is connect to a network, but you are not on that network, and cant get access for whatever reason) but ...