Questions tagged [routing]
Routing is the process of moving packets across a network from one host to another. It is usually performed by dedicated devices called routers.
148
questions
0
votes
0
answers
99
views
Can my employer detect that I am using a torrent client on my home pc while teleworking? [duplicate]
I am working from home with a 'work' laptop, connected through a VPN client to my company and also to the customer networks.
I also have my 'home pc' on the same home network.
Both computers are ...
1
vote
0
answers
22
views
How do I reach the "remote" web app using IP routing? (locally reaching another subnet with VPN to get to an app) [closed]
I have a PCAP basically stating two things:
An ARP request who has 192.168.a.b? Tell 192.168.b.c
An ARP answer with the MAC address follows of course.
The following requests all access an web app, ...
- 1,546
1
vote
2
answers
61
views
What is the better tunnel endpoint?
I'm trying to understand the consequences or implications of setting up tunneling endpoints for the below topology. The tunneling may be used for anything (encryption, VPNs, etc.) assuming the general ...
0
votes
1
answer
102
views
Can attacker gain access to my private network application through pivoting and/or lateral movement?
I am using a public wifi network.
When I start a nodejs express server at my local system at port 3000, I can access that website on another device (that is connected to the same public wifi network) ...
- 15
0
votes
1
answer
56
views
How routing protocols deal with malicious or faulty routers?
I know very little about Internet Protocol or networking in general but my understanding is that, at a very high level, the routing works by routers telling other routers how "fast" they can ...
user275766
0
votes
1
answer
167
views
how does a DNS request sniffer see packets destined for DNS server?
If a DNS sniffer/spoofer is running on a network using something like netwag/netwox, how does the sniffer see the request that is destined for the real DNS server?
Wouldn't the packets for the DNS ...
- 101
0
votes
1
answer
105
views
Should I be seeing network management protocols on 'user' subnets?
When performing a passive packet capture of a network, I have seen a large amount of traffic being broadcast using different protocols. These protocols are primarily used to perform some kind of ...
- 11.5k
0
votes
0
answers
162
views
Routing a site-to-site VPN through my regular VPN service
currently engaged in live competitive red vs blue team exercises in an enterprise style Windows AD environment. My device runs a modern Debian Linux OS.
cscotun0
We typically connect to the lab/domain ...
- 1,749
0
votes
1
answer
290
views
How to prevent a web application from accessing local URLs (SSRF) [duplicate]
In our web app the users can specify a URL that the server will access later (POP3 access and browser push notifications).
This means the web app does a network request to a user-chosen server. The ...
- 103
1
vote
2
answers
372
views
What is the risk of my VPN traffic routing through China?
I recently set up a new VPN on a Hetzner VPS (using Wireguard). It works fine, but I notice that when I do a traceroute from home to the server, I see several Chinese intermediaries.
I'm not too ...
- 135
0
votes
0
answers
216
views
Open Ports at ISPs Gateway
I am working to set up OpenVPN access to my home network. To do this, I had to contact my ISP, because they had the necessary port blocked at the Gateway/Router that I do not have access to.
In my ...
- 1
0
votes
1
answer
516
views
How to block all inbound traffic from a specific Internet address or subnet using TomatoUSB router software (LINUX based)
I'm not trained in Linux, but I think I found the solution to my problem documented, but it is not working as expected. I am NOT an iptables guru, I'm learning as I go.
A Russian IP is trying to ...
- 171
1
vote
1
answer
264
views
Other computers/customers of my Internet Service Provider appears under my "Network" section in Windows Explorer
I could see many computers under "Network" section on the left sidebar of Windows Explorer, but I am the only one who uses computer on my home.
So I suppose all those computers are also using the ...
- 313
2
votes
3
answers
239
views
What happen when a local device have the same IP as an external website
When I enter 'google.com' in my web browser, my computer goes to the DNS server and gets Google's server IP address, then it look for that address in the local network and when it doesn't find it it ...
Abdulrahman Alattas
2
votes
1
answer
377
views
Can we use network hub as an MITM sniffing device?
My intention is to analyze all network traffic which is coming to and originating from a network connected device I have. From the configurations of the device I am able to proxy all the HTTP traffic ...
- 3,901
0
votes
1
answer
135
views
Secure Routing without relying on Cryptography? [closed]
Is anyone aware of a routing protocols for Ad Hoc Networks (such as OLSR, AODV, ZRP) which are secure without relying on pre-established key management? What I mean by secure is, preventing data ...
- 11
2
votes
1
answer
255
views
Routing traffic through compromised host
I have a shell in a remote machine. I want to route my traffic in a dynamic way, so that can access say https://www.google.com via the IP address of the previously mentioned compromised machine.
I ...
- 21
1
vote
2
answers
5k
views
How to find a "secret" gateway
I'm practicing penetration testing and I'm in front of a basic routing exercise.
The context is the following: I'm using a virtual machine with Kali Linux from which I connect in VPN to the network ...
- 111
0
votes
1
answer
296
views
Why do I have a specific route for this strange IP?
I use ubuntu. The only apps I have in it are firefox and telegram, both downloaded through official channels. I use other apps with virtualization, so my main machine is mostly clean.
I use a VPN so ...
- 415
0
votes
1
answer
831
views
Man in the Middle how to read incoming traffic for victims on the network
i was just testing something about MITM i know MITM well
attack is just like:
gateway = 192.168.1.1
victim = 192.168.1.13
attacker = 192.168.1.6
performing mitm and enable linux kernel ip_forwarding ...
2
votes
0
answers
775
views
Random Alphabetical String Added to URL
I originally asked this question over at Stack Overflow, but someone there suggested asking here because it might be possible that something malicious may be causing the following issue:
Users have ...
- 63
0
votes
2
answers
1k
views
Do household IPv6 addresses introduce vulnerabilities? [duplicate]
Apparently, for half a year already at least, my ISP has assigned me IPv6 addresses. I discovered this accidentally, while editing Wikipedia. So it seems my ISP started to support IPv6 addresses and ...
- 5,717
1
vote
2
answers
738
views
What can I do to prevent BGP hijacking as an admin of some OVH's VPS?
I am an operator of some public service which is run on some OVH's VPS.
Recently I was contacted by an anonymous contact, who suggested that the service was BGP-hijacked and some sensitive info of ...
- 141
0
votes
1
answer
1k
views
Web server responding to an HTTP request from a spoofed IP address
Hypothetically speaking - if my web server gets an http request for a given file, say default.html, and let's say the requesting IP address has been spoofed, what happens when my server responds to ...
1
vote
0
answers
102
views
VPN or SSH or what option would work for what I want to do? [closed]
I need to have my Internet connection for work to show up as being from a specific city. They state I am not allowed to work from anywhere other than the address on my record for security reasons. ...
- 11
0
votes
1
answer
1k
views
Communicating routed interfaces for Cisco ASA 5506-X [closed]
Recently our organisation has been supplied a new ASA 5506-X to replace the old good PIX506e for a project.
We have encountered a problem on routed interface on ASA 5506, which is very different from ...
- 9
1
vote
0
answers
2k
views
Creating a rogue AP with Kali Linux
so i have for the last 2 days going through this task of setting up a Rogue AP on my Kali linux running in my VM.... i am using the 64bit version and the wifi adapter is TP link TL WN722N, so my ...
1
vote
0
answers
137
views
Avoid traffic toward unassigned ip address [closed]
In my environment job, we assign IP public segments to our customers. For example, I am using a /29 public segment. If the customer is only using two IP addresses, when I send a ping to the other IPs ...
- 11
0
votes
2
answers
184
views
will my ISP know my connection between systems in same network?
lets say im connected to internet via broadband. My public IP is 117.223.23.5 . my question is if i connect to other pc in 117.233.23.0/24 network will they be able to monitor my data packets? if ping ...
- 113
1
vote
1
answer
701
views
cross-over cable vs router for network with 2 computers?
I want to connect 2 Windows home computers together for a server/client relationship; however, only the "client" computer should be connected to the internet.
"Server Computer" <----> "Client ...
- 11
1
vote
0
answers
246
views
Why is Skype traffic not passing through the NAT table of the PREROUTING chain in iptables?
I have successfully performed a MITM attack and have managed to view the HTTP/HTTPS packets of the victim passing through the nat table of the PREROUTING chain of my iptables.(using -j LOG) However, ...
- 439
4
votes
2
answers
808
views
Sending multiple MAC addresses to the same port on a switch
What could happen if someone continuously sends frames with different source MAC addresses to the same port on a switch? Knowing that this port doesn't apply the "port-security" mode.
- 41
1
vote
2
answers
2k
views
nmap reports a remote host as up, while it is down? [closed]
I want to remotely examine if some servers are up.
I don't use the ping command because it gives a lot of wrong results like
"destination host unreachable" and "request Timed out" due to bad ...
- 11
2
votes
1
answer
337
views
What does this suspicious activity in my log suggest?
I found following log lines on my asterisk program (VoIP) running on debian Jessie server 3.4.112 for arm
[2016-12-25 01:58:52] NOTICE[12054] res_pjsip/pjsip_distributor.c:
Request 'INVITE' from '"...
- 899
1
vote
1
answer
96
views
Could one cause IP fragments' Identification Field collision and thus hinder server's work?
Is it possible that collision occurs when malicious user spoofs his IP to imitate legitimate user and sends IP with same src/dest/"Identification Field" values in IP's header thus causing reassembly ...
- 113
5
votes
1
answer
369
views
What is the simplest way to prevent adding a new default route via dhcp?
I have a corporate network to which remote access is provided via openvpn. Customers include a variety of devices (laptops, smartphones).
These devices running software that accesses corporate ...
- 51
1
vote
1
answer
92
views
General question on secure channels and implementations
In the modern world of fast CPUs and large memory blocks should we use TLS encrypted channels outside of the browser/server paradigm ? One of the examples would be to establish TLS connection across ...
- 111
4
votes
3
answers
49k
views
Can someone take money out of my account with just my Account & Routing number?
I had recently given someone my account number and routing number to deposit money into my checking account. They owed me money I had lent and said this would be the easiest way for them to do it. I ...
- 41
2
votes
1
answer
3k
views
CIS recommendations - disabling ip forwarding
I am looking through the CIS recommendations for debian 8.
In a CIS compliance test using nessus, I see that the test for disabling ip forwarding has failed. But when I look at the system, I can see ...
- 5,799
6
votes
3
answers
8k
views
What are the security implications of net.ipv4.conf.eth0.route_localnet=1 / route_localnet?
sudo sysctl -w net.ipv4.conf.eth0.route_localnet=1
What are the security implications of route_localnet?
- 744
5
votes
1
answer
5k
views
Sending Probe Request Frames | Receving Probe Response -- Scapy
OBJECTIVE
Send probe request frame subtype=4 and receive probe response subtype=5 with Scapy
Ultimate goal is to detect access points nearby via Scapy ( not by sniffing beacon frames )
The object ...
- 345
1
vote
3
answers
4k
views
OSCP (Offensive Security's PWK) Requirements [duplicate]
I wanted to ask a few questions, mainly referred to those who completed OSCP or who know about it.
I want to take the course, I know that understanding of TCP/IP, IP subnetting and addressing and ...
- 73
2
votes
1
answer
101
views
Does altering the routing table to my hub defeat the purpose of a VPN?
I am running a VPN on my server with openvpn. When running openvpn I have a shell script that runs afterwards:
ip rule add from 192.168.0.19 table 128
ip route add table 128 to 192.168.0.0/24 dev ...
- 383
3
votes
3
answers
801
views
Is a router without inbound firewall a security issue across the internet?
Imagine this scenario: Alice has a private subnet (192.168.1.0/24) connected to a router which is also connected to local network B. Alice's router performs NAT (only using MASQUERADE; outbound ...
- 12.6k
-3
votes
1
answer
736
views
Is it possible to Use someone public IP? [closed]
I am quite aware of the networking. But I have a confusion which I am searching over internet but did not come to any solution.
Can we assign any specific IP to our PC or any device. Like I want to ...
- 115
1
vote
0
answers
2k
views
Gargoyle (OpenWRT) firewall routing for VPN
At present I have Gargoyle setup on my WNDR3700 to connection to a VPN provider in order to provide a little privacy. However this prevents me from connecting remotely to my home network. Previously I ...
- 11
1
vote
1
answer
586
views
is it possible to intercept network packets outside lan?
User A is in a different country than user B and they have different IP ranges and ISPs.
Is it possible for A to intercept B's communication sent to a third party, without using techniques like ...
- 11
1
vote
4
answers
498
views
Does a WAN to LAN Route Conversion Through a Router Adds Security? [duplicate]
Use of a Router is the first solution for adding a security layer to any LAN with N machines, connected to the internet (through its firewall settings). My question is does the WAN to LAN conversion ...
- 129
9
votes
1
answer
4k
views
Vulnerabilities of pure NAT without firewall
Following some of the comments on this question, I was curious about the security vulnerabilities of NAT. There are similar threads here and here but they discuss router vulnerabilities rather than ...
- 446
6
votes
3
answers
7k
views
How to track back a dynamic IP address?
Is there a way to trace back who was using a public dynamic IP address previously?
Would it be possible to find out the MAC address of the host using the IP address at a given time? (e.g., can you ...
- 2,617