Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

Questions tagged [routing]

Routing is the process of moving packets across a network from one host to another. It is usually performed by dedicated devices called routers.

Filter by
Sorted by
Tagged with
2 votes
0 answers
54 views

Why is IPsec transport mode "vulnerable" for not having integrity of variable fields? Why is this so important?

With IPsec transport mode we CAN'T have integrity of variable fields (eg TTL and checksum). Why is it a problem? Is it? What could be the attack? I think TTL expire or checksum modification (so both ...
allexj's user avatar
  • 21
1 vote
0 answers
247 views

Using Android Wireless Hotspot while connected to Hotel internet via VPN

I want to make sure I understand the security implications of this scenario: I am staying in a hotel. I have a VPN on my android phone. I connect to the hotel's unencrypted WiFi network with the ...
stochastic's user avatar
1 vote
0 answers
65 views

How do I reach the "remote" web app using IP routing? (locally reaching another subnet with VPN to get to an app) [closed]

I have a PCAP basically stating two things: An ARP request who has 192.168.a.b? Tell 192.168.b.c An ARP answer with the MAC address follows of course. The following requests all access an web app, ...
Sir Muffington's user avatar
1 vote
2 answers
115 views

What is the better tunnel endpoint?

I'm trying to understand the consequences or implications of setting up tunneling endpoints for the below topology. The tunneling may be used for anything (encryption, VPNs, etc.) assuming the general ...
Watchdogs1499's user avatar
0 votes
1 answer
216 views

Can attacker gain access to my private network application through pivoting and/or lateral movement?

I am using a public wifi network. When I start a nodejs express server at my local system at port 3000, I can access that website on another device (that is connected to the same public wifi network) ...
an0nhi11's user avatar
0 votes
1 answer
96 views

How routing protocols deal with malicious or faulty routers?

I know very little about Internet Protocol or networking in general but my understanding is that, at a very high level, the routing works by routers telling other routers how "fast" they can ...
user avatar
0 votes
1 answer
226 views

how does a DNS request sniffer see packets destined for DNS server?

If a DNS sniffer/spoofer is running on a network using something like netwag/netwox, how does the sniffer see the request that is destined for the real DNS server? Wouldn't the packets for the DNS ...
CJ7's user avatar
  • 101
0 votes
1 answer
134 views

Should I be seeing network management protocols on 'user' subnets?

When performing a passive packet capture of a network, I have seen a large amount of traffic being broadcast using different protocols. These protocols are primarily used to perform some kind of ...
NULLZ's user avatar
  • 11.5k
0 votes
0 answers
196 views

Routing a site-to-site VPN through my regular VPN service

currently engaged in live competitive red vs blue team exercises in an enterprise style Windows AD environment. My device runs a modern Debian Linux OS. cscotun0 We typically connect to the lab/domain ...
voices's user avatar
  • 1,779
0 votes
1 answer
425 views

How to prevent a web application from accessing local URLs (SSRF) [duplicate]

In our web app the users can specify a URL that the server will access later (POP3 access and browser push notifications). This means the web app does a network request to a user-chosen server. The ...
Georg Schölly's user avatar
1 vote
2 answers
482 views

What is the risk of my VPN traffic routing through China?

I recently set up a new VPN on a Hetzner VPS (using Wireguard). It works fine, but I notice that when I do a traceroute from home to the server, I see several Chinese intermediaries. I'm not too ...
Kefka's user avatar
  • 135
0 votes
0 answers
257 views

Open Ports at ISPs Gateway

I am working to set up OpenVPN access to my home network. To do this, I had to contact my ISP, because they had the necessary port blocked at the Gateway/Router that I do not have access to. In my ...
DRoyLenz's user avatar
0 votes
1 answer
573 views

How to block all inbound traffic from a specific Internet address or subnet using TomatoUSB router software (LINUX based)

I'm not trained in Linux, but I think I found the solution to my problem documented, but it is not working as expected. I am NOT an iptables guru, I'm learning as I go. A Russian IP is trying to ...
appDeveloper's user avatar
1 vote
1 answer
315 views

Other computers/customers of my Internet Service Provider appears under my "Network" section in Windows Explorer

I could see many computers under "Network" section on the left sidebar of Windows Explorer, but I am the only one who uses computer on my home. So I suppose all those computers are also using the ...
topher's user avatar
  • 323
2 votes
3 answers
302 views

What happen when a local device have the same IP as an external website

When I enter 'google.com' in my web browser, my computer goes to the DNS server and gets Google's server IP address, then it look for that address in the local network and when it doesn't find it it ...
user avatar
2 votes
1 answer
439 views

Can we use network hub as an MITM sniffing device?

My intention is to analyze all network traffic which is coming to and originating from a network connected device I have. From the configurations of the device I am able to proxy all the HTTP traffic ...
hax's user avatar
  • 3,951
0 votes
1 answer
158 views

Secure Routing without relying on Cryptography? [closed]

Is anyone aware of a routing protocols for Ad Hoc Networks (such as OLSR, AODV, ZRP) which are secure without relying on pre-established key management? What I mean by secure is, preventing data ...
Mark R's user avatar
  • 11
2 votes
1 answer
310 views

Routing traffic through compromised host

I have a shell in a remote machine. I want to route my traffic in a dynamic way, so that can access say https://www.google.com via the IP address of the previously mentioned compromised machine. I ...
das's user avatar
  • 21
1 vote
2 answers
5k views

How to find a "secret" gateway

I'm practicing penetration testing and I'm in front of a basic routing exercise. The context is the following: I'm using a virtual machine with Kali Linux from which I connect in VPN to the network ...
Luca Sepe's user avatar
  • 111
0 votes
1 answer
320 views

Why do I have a specific route for this strange IP?

I use ubuntu. The only apps I have in it are firefox and telegram, both downloaded through official channels. I use other apps with virtualization, so my main machine is mostly clean. I use a VPN so ...
Guerlando OCs's user avatar
0 votes
1 answer
949 views

Man in the Middle how to read incoming traffic for victims on the network

i was just testing something about MITM i know MITM well attack is just like: gateway = 192.168.1.1 victim = 192.168.1.13 attacker = 192.168.1.6 performing mitm and enable linux kernel ip_forwarding ...
mahmoudadel's user avatar
2 votes
0 answers
835 views

Random Alphabetical String Added to URL

I originally asked this question over at Stack Overflow, but someone there suggested asking here because it might be possible that something malicious may be causing the following issue: Users have ...
user138172's user avatar
2 votes
2 answers
2k views

Do household IPv6 addresses introduce vulnerabilities? [duplicate]

Apparently, for half a year already at least, my ISP has assigned me IPv6 addresses. I discovered this accidentally, while editing Wikipedia. So it seems my ISP started to support IPv6 addresses and ...
gaazkam's user avatar
  • 6,017
1 vote
2 answers
791 views

What can I do to prevent BGP hijacking as an admin of some OVH's VPS?

I am an operator of some public service which is run on some OVH's VPS. Recently I was contacted by an anonymous contact, who suggested that the service was BGP-hijacked and some sensitive info of ...
Neurotransmitter's user avatar
0 votes
1 answer
2k views

Web server responding to an HTTP request from a spoofed IP address

Hypothetically speaking - if my web server gets an http request for a given file, say default.html, and let's say the requesting IP address has been spoofed, what happens when my server responds to ...
Peggy Schafer's user avatar
1 vote
0 answers
122 views

VPN or SSH or what option would work for what I want to do? [closed]

I need to have my Internet connection for work to show up as being from a specific city. They state I am not allowed to work from anywhere other than the address on my record for security reasons. ...
CuriousCat's user avatar
0 votes
1 answer
2k views

Communicating routed interfaces for Cisco ASA 5506-X [closed]

Recently our organisation has been supplied a new ASA 5506-X to replace the old good PIX506e for a project. We have encountered a problem on routed interface on ASA 5506, which is very different from ...
YFQ's user avatar
  • 9
1 vote
0 answers
2k views

Creating a rogue AP with Kali Linux

so i have for the last 2 days going through this task of setting up a Rogue AP on my Kali linux running in my VM.... i am using the 64bit version and the wifi adapter is TP link TL WN722N, so my ...
Mahesh Chandra's user avatar
1 vote
0 answers
166 views

Avoid traffic toward unassigned ip address [closed]

In my environment job, we assign IP public segments to our customers. For example, I am using a /29 public segment. If the customer is only using two IP addresses, when I send a ping to the other IPs ...
Frnndo's user avatar
  • 11
0 votes
2 answers
238 views

will my ISP know my connection between systems in same network?

lets say im connected to internet via broadband. My public IP is 117.223.23.5 . my question is if i connect to other pc in 117.233.23.0/24 network will they be able to monitor my data packets? if ping ...
knobiDev's user avatar
  • 113
1 vote
1 answer
736 views

cross-over cable vs router for network with 2 computers?

I want to connect 2 Windows home computers together for a server/client relationship; however, only the "client" computer should be connected to the internet. "Server Computer" <----> "Client ...
Todd's user avatar
  • 11
1 vote
0 answers
267 views

Why is Skype traffic not passing through the NAT table of the PREROUTING chain in iptables?

I have successfully performed a MITM attack and have managed to view the HTTP/HTTPS packets of the victim passing through the nat table of the PREROUTING chain of my iptables.(using -j LOG) However, ...
Lew Wei Hao's user avatar
4 votes
2 answers
865 views

Sending multiple MAC addresses to the same port on a switch

What could happen if someone continuously sends frames with different source MAC addresses to the same port on a switch? Knowing that this port doesn't apply the "port-security" mode.
Zak S's user avatar
  • 41
1 vote
2 answers
2k views

nmap reports a remote host as up, while it is down? [closed]

I want to remotely examine if some servers are up. I don't use the ping command because it gives a lot of wrong results like "destination host unreachable" and "request Timed out" due to bad ...
saber's user avatar
  • 11
2 votes
1 answer
359 views

What does this suspicious activity in my log suggest?

I found following log lines on my asterisk program (VoIP) running on debian Jessie server 3.4.112 for arm [2016-12-25 01:58:52] NOTICE[12054] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"...
AXANO's user avatar
  • 899
1 vote
1 answer
132 views

Could one cause IP fragments' Identification Field collision and thus hinder server's work?

Is it possible that collision occurs when malicious user spoofs his IP to imitate legitimate user and sends IP with same src/dest/"Identification Field" values in IP's header thus causing reassembly ...
user avatar
5 votes
1 answer
393 views

What is the simplest way to prevent adding a new default route via dhcp?

I have a corporate network to which remote access is provided via openvpn. Customers include a variety of devices (laptops, smartphones). These devices running software that accesses corporate ...
ivanko's user avatar
  • 51
1 vote
1 answer
113 views

General question on secure channels and implementations

In the modern world of fast CPUs and large memory blocks should we use TLS encrypted channels outside of the browser/server paradigm ? One of the examples would be to establish TLS connection across ...
Yerken's user avatar
  • 111
4 votes
3 answers
56k views

Can someone take money out of my account with just my Account & Routing number?

I had recently given someone my account number and routing number to deposit money into my checking account. They owed me money I had lent and said this would be the easiest way for them to do it. I ...
Kmarie's user avatar
  • 41
2 votes
1 answer
4k views

CIS recommendations - disabling ip forwarding

I am looking through the CIS recommendations for debian 8. In a CIS compliance test using nessus, I see that the test for disabling ip forwarding has failed. But when I look at the system, I can see ...
Dog eat cat world's user avatar
7 votes
3 answers
9k views

What are the security implications of net.ipv4.conf.eth0.route_localnet=1 / route_localnet?

sudo sysctl -w net.ipv4.conf.eth0.route_localnet=1 What are the security implications of route_localnet?
adrelanos's user avatar
  • 764
5 votes
1 answer
6k views

Sending Probe Request Frames | Receving Probe Response -- Scapy

OBJECTIVE Send probe request frame subtype=4 and receive probe response subtype=5 with Scapy Ultimate goal is to detect access points nearby via Scapy ( not by sniffing beacon frames ) The object ...
ma77c's user avatar
  • 345
1 vote
3 answers
4k views

OSCP (Offensive Security's PWK) Requirements [duplicate]

I wanted to ask a few questions, mainly referred to those who completed OSCP or who know about it. I want to take the course, I know that understanding of TCP/IP, IP subnetting and addressing and ...
Jonathan's user avatar
2 votes
1 answer
117 views

Does altering the routing table to my hub defeat the purpose of a VPN?

I am running a VPN on my server with openvpn. When running openvpn I have a shell script that runs afterwards: ip rule add from 192.168.0.19 table 128 ip route add table 128 to 192.168.0.0/24 dev ...
maxisme's user avatar
  • 383
3 votes
3 answers
856 views

Is a router without inbound firewall a security issue across the internet?

Imagine this scenario: Alice has a private subnet (192.168.1.0/24) connected to a router which is also connected to local network B. Alice's router performs NAT (only using MASQUERADE; outbound ...
multithr3at3d's user avatar
-3 votes
1 answer
758 views

Is it possible to Use someone public IP? [closed]

I am quite aware of the networking. But I have a confusion which I am searching over internet but did not come to any solution. Can we assign any specific IP to our PC or any device. Like I want to ...
Adnan Ali's user avatar
  • 115
1 vote
0 answers
2k views

Gargoyle (OpenWRT) firewall routing for VPN

At present I have Gargoyle setup on my WNDR3700 to connection to a VPN provider in order to provide a little privacy. However this prevents me from connecting remotely to my home network. Previously I ...
Mark's user avatar
  • 111
1 vote
1 answer
622 views

is it possible to intercept network packets outside lan?

User A is in a different country than user B and they have different IP ranges and ISPs. Is it possible for A to intercept B's communication sent to a third party, without using techniques like ...
allahjane's user avatar
1 vote
4 answers
580 views

Does a WAN to LAN Route Conversion Through a Router Adds Security? [duplicate]

Use of a Router is the first solution for adding a security layer to any LAN with N machines, connected to the internet (through its firewall settings). My question is does the WAN to LAN conversion ...
o-0's user avatar
  • 129
10 votes
1 answer
4k views

Vulnerabilities of pure NAT without firewall

Following some of the comments on this question, I was curious about the security vulnerabilities of NAT. There are similar threads here and here but they discuss router vulnerabilities rather than ...
Michael B's user avatar
  • 456