Questions tagged [routing]

Routing is the process of moving packets across a network from one host to another. It is usually performed by dedicated devices called routers.

Filter by
Sorted by
Tagged with
0 votes
1 answer
48 views

How routing protocols deal with malicious or faulty routers?

I know very little about Internet Protocol or networking in general but my understanding is that, at a very high level, the routing works by routers telling other routers how "fast" they can ...
user avatar
0 votes
0 answers
82 views

Is using SSL/TLS Termination insecure in Azure with Private Endpoints

Azure documentation mentions using SSL termination at app gateways to offload app services from some overhead. This sounds like a good idea, but then traffic will be unencrypted when travelling from ...
user avatar
  • 153
0 votes
0 answers
66 views

Meaning of Broadcasting WAN status in Cain ARP Poison Routing

I was going through Cain and Abel's Manual to perform an ARP Poison Routing attack, also known as APR and it mentioned that while performing the attack between a host and gateway, we could see '...
user avatar
0 votes
1 answer
92 views

how does a DNS request sniffer see packets destined for DNS server?

If a DNS sniffer/spoofer is running on a network using something like netwag/netwox, how does the sniffer see the request that is destined for the real DNS server? Wouldn't the packets for the DNS ...
user avatar
  • 101
0 votes
0 answers
126 views

Is it possible to sniff packets from a remote IP? [duplicate]

For a while I have been playing around with packet sniffing on my local network (using an ARP poisoning attack to redirect packets to me, then relaying them and viewing them in wireshark). However, I ...
user avatar
0 votes
1 answer
99 views

Should I be seeing network management protocols on 'user' subnets?

When performing a passive packet capture of a network, I have seen a large amount of traffic being broadcast using different protocols. These protocols are primarily used to perform some kind of ...
user avatar
  • 11.4k
0 votes
0 answers
136 views

Routing a site-to-site VPN through my regular VPN service

currently engaged in live competitive red vs blue team exercises in an enterprise style Windows AD environment. My device runs a modern Debian Linux OS. cscotun0 We typically connect to the lab/domain ...
user avatar
  • 1,639
0 votes
1 answer
166 views

How to prevent a web application from accessing local URLs (SSRF) [duplicate]

In our web app the users can specify a URL that the server will access later (POP3 access and browser push notifications). This means the web app does a network request to a user-chosen server. The ...
user avatar
1 vote
2 answers
268 views

What is the risk of my VPN traffic routing through China?

I recently set up a new VPN on a Hetzner VPS (using Wireguard). It works fine, but I notice that when I do a traceroute from home to the server, I see several Chinese intermediaries. I'm not too ...
user avatar
  • 135
0 votes
0 answers
160 views

Open Ports at ISPs Gateway

I am working to set up OpenVPN access to my home network. To do this, I had to contact my ISP, because they had the necessary port blocked at the Gateway/Router that I do not have access to. In my ...
user avatar
0 votes
1 answer
435 views

How to block all inbound traffic from a specific Internet address or subnet using TomatoUSB router software (LINUX based)

I'm not trained in Linux, but I think I found the solution to my problem documented, but it is not working as expected. I am NOT an iptables guru, I'm learning as I go. A Russian IP is trying to ...
user avatar
1 vote
1 answer
225 views

Other computers/customers of my Internet Service Provider appears under my "Network" section in Windows Explorer

I could see many computers under "Network" section on the left sidebar of Windows Explorer, but I am the only one who uses computer on my home. So I suppose all those computers are also using the ...
user avatar
  • 303
2 votes
3 answers
183 views

What happen when a local device have the same IP as an external website

When I enter 'google.com' in my web browser, my computer goes to the DNS server and gets Google's server IP address, then it look for that address in the local network and when it doesn't find it it ...
user avatar
2 votes
1 answer
315 views

Can we use network hub as an MITM sniffing device?

My intention is to analyze all network traffic which is coming to and originating from a network connected device I have. From the configurations of the device I am able to proxy all the HTTP traffic ...
user avatar
  • 3,841
0 votes
1 answer
130 views

Secure Routing without relying on Cryptography? [closed]

Is anyone aware of a routing protocols for Ad Hoc Networks (such as OLSR, AODV, ZRP) which are secure without relying on pre-established key management? What I mean by secure is, preventing data ...
user avatar
  • 11
2 votes
1 answer
205 views

Routing traffic through compromised host

I have a shell in a remote machine. I want to route my traffic in a dynamic way, so that can access say https://www.google.com via the IP address of the previously mentioned compromised machine. I ...
user avatar
  • 21
1 vote
2 answers
4k views

How to find a "secret" gateway

I'm practicing penetration testing and I'm in front of a basic routing exercise. The context is the following: I'm using a virtual machine with Kali Linux from which I connect in VPN to the network ...
user avatar
  • 111
0 votes
1 answer
275 views

Why do I have a specific route for this strange IP?

I use ubuntu. The only apps I have in it are firefox and telegram, both downloaded through official channels. I use other apps with virtualization, so my main machine is mostly clean. I use a VPN so ...
user avatar
0 votes
1 answer
777 views

Man in the Middle how to read incoming traffic for victims on the network

i was just testing something about MITM i know MITM well attack is just like: gateway = 192.168.1.1 victim = 192.168.1.13 attacker = 192.168.1.6 performing mitm and enable linux kernel ip_forwarding ...
user avatar
2 votes
0 answers
647 views

Random Alphabetical String Added to URL

I originally asked this question over at Stack Overflow, but someone there suggested asking here because it might be possible that something malicious may be causing the following issue: Users have ...
user avatar
0 votes
2 answers
861 views

Do household IPv6 addresses introduce vulnerabilities? [duplicate]

Apparently, for half a year already at least, my ISP has assigned me IPv6 addresses. I discovered this accidentally, while editing Wikipedia. So it seems my ISP started to support IPv6 addresses and ...
user avatar
  • 5,587
1 vote
2 answers
678 views

What can I do to prevent BGP hijacking as an admin of some OVH's VPS?

I am an operator of some public service which is run on some OVH's VPS. Recently I was contacted by an anonymous contact, who suggested that the service was BGP-hijacked and some sensitive info of ...
user avatar
0 votes
1 answer
1k views

Web server responding to an HTTP request from a spoofed IP address

Hypothetically speaking - if my web server gets an http request for a given file, say default.html, and let's say the requesting IP address has been spoofed, what happens when my server responds to ...
user avatar
1 vote
0 answers
99 views

VPN or SSH or what option would work for what I want to do? [closed]

I need to have my Internet connection for work to show up as being from a specific city. They state I am not allowed to work from anywhere other than the address on my record for security reasons. ...
user avatar
0 votes
1 answer
1k views

Communicating routed interfaces for Cisco ASA 5506-X [closed]

Recently our organisation has been supplied a new ASA 5506-X to replace the old good PIX506e for a project. We have encountered a problem on routed interface on ASA 5506, which is very different from ...
user avatar
  • 9
1 vote
0 answers
2k views

Creating a rogue AP with Kali Linux

so i have for the last 2 days going through this task of setting up a Rogue AP on my Kali linux running in my VM.... i am using the 64bit version and the wifi adapter is TP link TL WN722N, so my ...
user avatar
1 vote
0 answers
114 views

Avoid traffic toward unassigned ip address [closed]

In my environment job, we assign IP public segments to our customers. For example, I am using a /29 public segment. If the customer is only using two IP addresses, when I send a ping to the other IPs ...
user avatar
  • 11
0 votes
2 answers
176 views

will my ISP know my connection between systems in same network?

lets say im connected to internet via broadband. My public IP is 117.223.23.5 . my question is if i connect to other pc in 117.233.23.0/24 network will they be able to monitor my data packets? if ping ...
user avatar
  • 113
1 vote
1 answer
675 views

cross-over cable vs router for network with 2 computers?

I want to connect 2 Windows home computers together for a server/client relationship; however, only the "client" computer should be connected to the internet. "Server Computer" <----> "Client ...
user avatar
  • 11
1 vote
0 answers
242 views

Why is Skype traffic not passing through the NAT table of the PREROUTING chain in iptables?

I have successfully performed a MITM attack and have managed to view the HTTP/HTTPS packets of the victim passing through the nat table of the PREROUTING chain of my iptables.(using -j LOG) However, ...
user avatar
4 votes
2 answers
702 views

Sending multiple MAC addresses to the same port on a switch

What could happen if someone continuously sends frames with different source MAC addresses to the same port on a switch? Knowing that this port doesn't apply the "port-security" mode.
user avatar
  • 41
1 vote
2 answers
1k views

nmap reports a remote host as up, while it is down? [closed]

I want to remotely examine if some servers are up. I don't use the ping command because it gives a lot of wrong results like "destination host unreachable" and "request Timed out" due to bad ...
user avatar
  • 11
2 votes
1 answer
331 views

What does this suspicious activity in my log suggest?

I found following log lines on my asterisk program (VoIP) running on debian Jessie server 3.4.112 for arm [2016-12-25 01:58:52] NOTICE[12054] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"...
user avatar
  • 899
1 vote
1 answer
86 views

Could one cause IP fragments' Identification Field collision and thus hinder server's work?

Is it possible that collision occurs when malicious user spoofs his IP to imitate legitimate user and sends IP with same src/dest/"Identification Field" values in IP's header thus causing reassembly ...
user avatar
  • 113
5 votes
1 answer
356 views

What is the simplest way to prevent adding a new default route via dhcp?

I have a corporate network to which remote access is provided via openvpn. Customers include a variety of devices (laptops, smartphones). These devices running software that accesses corporate ...
user avatar
  • 51
1 vote
1 answer
86 views

General question on secure channels and implementations

In the modern world of fast CPUs and large memory blocks should we use TLS encrypted channels outside of the browser/server paradigm ? One of the examples would be to establish TLS connection across ...
user avatar
  • 111
3 votes
3 answers
42k views

Can someone take money out of my account with just my Account & Routing number?

I had recently given someone my account number and routing number to deposit money into my checking account. They owed me money I had lent and said this would be the easiest way for them to do it. I ...
user avatar
  • 31
2 votes
1 answer
3k views

CIS recommendations - disabling ip forwarding

I am looking through the CIS recommendations for debian 8. In a CIS compliance test using nessus, I see that the test for disabling ip forwarding has failed. But when I look at the system, I can see ...
user avatar
6 votes
3 answers
7k views

What are the security implications of net.ipv4.conf.eth0.route_localnet=1 / route_localnet?

sudo sysctl -w net.ipv4.conf.eth0.route_localnet=1 What are the security implications of route_localnet?
user avatar
  • 670
5 votes
1 answer
5k views

Sending Probe Request Frames | Receving Probe Response -- Scapy

OBJECTIVE Send probe request frame subtype=4 and receive probe response subtype=5 with Scapy Ultimate goal is to detect access points nearby via Scapy ( not by sniffing beacon frames ) The object ...
user avatar
  • 325
1 vote
3 answers
4k views

OSCP (Offensive Security's PWK) Requirements [duplicate]

I wanted to ask a few questions, mainly referred to those who completed OSCP or who know about it. I want to take the course, I know that understanding of TCP/IP, IP subnetting and addressing and ...
user avatar
2 votes
1 answer
95 views

Does altering the routing table to my hub defeat the purpose of a VPN?

I am running a VPN on my server with openvpn. When running openvpn I have a shell script that runs afterwards: ip rule add from 192.168.0.19 table 128 ip route add table 128 to 192.168.0.0/24 dev ...
user avatar
  • 383
3 votes
3 answers
710 views

Is a router without inbound firewall a security issue across the internet?

Imagine this scenario: Alice has a private subnet (192.168.1.0/24) connected to a router which is also connected to local network B. Alice's router performs NAT (only using MASQUERADE; outbound ...
user avatar
-3 votes
1 answer
719 views

Is it possible to Use someone public IP? [closed]

I am quite aware of the networking. But I have a confusion which I am searching over internet but did not come to any solution. Can we assign any specific IP to our PC or any device. Like I want to ...
user avatar
  • 115
1 vote
0 answers
2k views

Gargoyle (OpenWRT) firewall routing for VPN

At present I have Gargoyle setup on my WNDR3700 to connection to a VPN provider in order to provide a little privacy. However this prevents me from connecting remotely to my home network. Previously I ...
user avatar
  • 11
1 vote
1 answer
522 views

is it possible to intercept network packets outside lan?

User A is in a different country than user B and they have different IP ranges and ISPs. Is it possible for A to intercept B's communication sent to a third party, without using techniques like ...
user avatar
1 vote
4 answers
453 views

Does a WAN to LAN Route Conversion Through a Router Adds Security? [duplicate]

Use of a Router is the first solution for adding a security layer to any LAN with N machines, connected to the internet (through its firewall settings). My question is does the WAN to LAN conversion ...
user avatar
  • 129
8 votes
1 answer
4k views

Vulnerabilities of pure NAT without firewall

Following some of the comments on this question, I was curious about the security vulnerabilities of NAT. There are similar threads here and here but they discuss router vulnerabilities rather than ...
user avatar
  • 436
6 votes
3 answers
6k views

How to track back a dynamic IP address?

Is there a way to trace back who was using a public dynamic IP address previously? Would it be possible to find out the MAC address of the host using the IP address at a given time? (e.g., can you ...
user avatar
  • 2,597
1 vote
0 answers
266 views

SDN Security - why not attack the controller itself?

I have been looking into SDN (Software Defined Networking) and one advantage of using this is to be able to redirect traffic to stop DDoS attacks. The traffic is ultimately thrown away. My question ...
user avatar
  • 143