Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [routing]

Routing is the process of moving packets across a network from one host to another. It is usually performed by dedicated devices called routers.

0
votes
1answer
89 views

Secure Routing without relying on Cryptography? [closed]

Is anyone aware of a routing protocols for Ad Hoc Networks (such as OLSR, AODV, ZRP) which are secure without relying on pre-established key management? What I mean by secure is, preventing data ...
2
votes
1answer
69 views

Routing traffic through compromised host

I have a shell in a remote machine. I want to route my traffic in a dynamic way, so that can access say https://www.google.com via the IP address of the previously mentioned compromised machine. I ...
1
vote
1answer
127 views

How to find a “secret” gateway

I'm practicing penetration testing and I'm in front of a basic routing exercise. The context is the following: I'm using a virtual machine with Kali Linux from which I connect in VPN to the network ...
0
votes
0answers
40 views

When developing a web application why should I enable case sensitivity for routes and strict routing mode?

Example for enabling case sensitivity will be for example "/show" route is not the same as "/Show". What are the best security best practice will be here? I was also wondering if I should enable ...
0
votes
1answer
82 views

Why do I have a specific route for this strange IP?

I use ubuntu. The only apps I have in it are firefox and telegram, both downloaded through official channels. I use other apps with virtualization, so my main machine is mostly clean. I use a VPN so ...
0
votes
1answer
182 views

Man in the Middle how to read incoming traffic for victims on the network

i was just testing something about MITM i know MITM well attack is just like: gateway = 192.168.1.1 victim = 192.168.1.13 attacker = 192.168.1.6 performing mitm and enable linux kernel ip_forwarding ...
2
votes
0answers
64 views

Random Alphabetical String Added to URL

I originally asked this question over at Stack Overflow, but someone there suggested asking here because it might be possible that something malicious may be causing the following issue: Users have ...
0
votes
2answers
102 views

Do household IPv6 addresses introduce vulnerabilities? [duplicate]

Apparently, for half a year already at least, my ISP has assigned me IPv6 addresses. I discovered this accidentally, while editing Wikipedia. So it seems my ISP started to support IPv6 addresses and ...
1
vote
2answers
324 views

What can I do to prevent BGP hijacking as an admin of some OVH's VPS?

I am an operator of some public service which is run on some OVH's VPS. Recently I was contacted by an anonymous contact, who suggested that the service was BGP-hijacked and some sensitive info of ...
0
votes
0answers
70 views

VPN tunnel, then tunnel again

I've read here, as well as the linked questions in the chosen solution, but have not been able to find my answer. My office has an L2TP/IPSec VPN available for us to use configured to forward to 0.0....
0
votes
0answers
173 views

Forward ssh traffic and decrypting it

I have two virtual machines with public ips. One of them acts as a linux server (let's call it Alice) and the other one has kali on it (you guessed, we'll call it Eve) and will act more or less as a ...
0
votes
1answer
378 views

Web server responding to an HTTP request from a spoofed IP address

Hypothetically speaking - if my web server gets an http request for a given file, say default.html, and let's say the requesting IP address has been spoofed, what happens when my server responds to ...
1
vote
0answers
53 views

VPN or SSH or what option would work for what I want to do? [closed]

I need to have my Internet connection for work to show up as being from a specific city. They state I am not allowed to work from anywhere other than the address on my record for security reasons. ...
0
votes
1answer
330 views

Communicating routed interfaces for Cisco ASA 5506-X [closed]

Recently our organisation has been supplied a new ASA 5506-X to replace the old good PIX506e for a project. We have encountered a problem on routed interface on ASA 5506, which is very different from ...
1
vote
0answers
946 views

Creating a rogue AP with Kali Linux

so i have for the last 2 days going through this task of setting up a Rogue AP on my Kali linux running in my VM.... i am using the 64bit version and the wifi adapter is TP link TL WN722N, so my ...
1
vote
0answers
57 views

Avoid traffic toward unassigned ip address [closed]

In my environment job, we assign IP public segments to our customers. For example, I am using a /29 public segment. If the customer is only using two IP addresses, when I send a ping to the other IPs ...
0
votes
2answers
140 views

will my ISP know my connection between systems in same network?

lets say im connected to internet via broadband. My public IP is 117.223.23.5 . my question is if i connect to other pc in 117.233.23.0/24 network will they be able to monitor my data packets? if ping ...
1
vote
1answer
264 views

cross-over cable vs router for network with 2 computers?

I want to connect 2 Windows home computers together for a server/client relationship; however, only the "client" computer should be connected to the internet. "Server Computer" <----> "Client ...
1
vote
0answers
140 views

Why is Skype traffic not passing through the NAT table of the PREROUTING chain in iptables?

I have successfully performed a MITM attack and have managed to view the HTTP/HTTPS packets of the victim passing through the nat table of the PREROUTING chain of my iptables.(using -j LOG) However, ...
4
votes
2answers
362 views

Sending multiple MAC addresses to the same port on a switch

What could happen if someone continuously sends frames with different source MAC addresses to the same port on a switch? Knowing that this port doesn't apply the "port-security" mode.
1
vote
2answers
503 views

nmap reports a remote host as up, while it is down? [closed]

I want to remotely examine if some servers are up. I don't use the ping command because it gives a lot of wrong results like "destination host unreachable" and "request Timed out" due to bad ...
1
vote
0answers
39 views

Maintaining Net Neutrality inside or outside a specific region [closed]

First, I'm not quite sure this is the correct group for the question, but one could see lack of neutrality as selective Denial of Service. If some region of the planet abandoned or actively opposed ...
2
votes
1answer
227 views

What does this suspicious activity in my log suggest?

I found following log lines on my asterisk program (VoIP) running on debian Jessie server 3.4.112 for arm [2016-12-25 01:58:52] NOTICE[12054] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"...
1
vote
1answer
32 views

Could one cause IP fragments' Identification Field collision and thus hinder server's work?

Is it possible that collision occurs when malicious user spoofs his IP to imitate legitimate user and sends IP with same src/dest/"Identification Field" values in IP's header thus causing reassembly ...
6
votes
1answer
180 views

What is the simplest way to prevent adding a new default route via dhcp?

I have a corporate network to which remote access is provided via openvpn. Customers include a variety of devices (laptops, smartphones). These devices running software that accesses corporate ...
1
vote
1answer
45 views

General question on secure channels and implementations

In the modern world of fast CPUs and large memory blocks should we use TLS encrypted channels outside of the browser/server paradigm ? One of the examples would be to establish TLS connection across ...
4
votes
3answers
17k views

Can someone take money out of my account with just my Account & Routing number?

I had recently given someone my account number and routing number to deposit money into my checking account. They owed me money I had lent and said this would be the easiest way for them to do it. I ...
3
votes
1answer
608 views

CIS recommendations - disabling ip forwarding

I am looking through the CIS recommendations for debian 8. In a CIS compliance test using nessus, I see that the test for disabling ip forwarding has failed. But when I look at the system, I can see ...
4
votes
2answers
2k views

What are the security implications of net.ipv4.conf.eth0.route_localnet=1 / route_localnet?

sudo sysctl -w net.ipv4.conf.eth0.route_localnet=1 What are the security implications of route_localnet?
4
votes
1answer
2k views

Sending Probe Request Frames | Receving Probe Response — Scapy

OBJECTIVE Send probe request frame subtype=4 and receive probe response subtype=5 with Scapy Ultimate goal is to detect access points nearby via Scapy ( not by sniffing beacon frames ) The object ...
0
votes
3answers
2k views

OSCP (Offensive Security's PWK) Requirements [duplicate]

I wanted to ask a few questions, mainly referred to those who completed OSCP or who know about it. I want to take the course, I know that understanding of TCP/IP, IP subnetting and addressing and ...
2
votes
1answer
58 views

Does altering the routing table to my hub defeat the purpose of a VPN?

I am running a VPN on my server with openvpn. When running openvpn I have a shell script that runs afterwards: ip rule add from 192.168.0.19 table 128 ip route add table 128 to 192.168.0.0/24 dev ...
0
votes
0answers
253 views

Variant of OSX.pirrit

Today while working with a customer, Someone came in with a peculiar problem. They could only access websites through https, and nothing through http. I tried the regular gauntlet of fixes for network ...
3
votes
3answers
384 views

Is a router without inbound firewall a security issue across the internet?

Imagine this scenario: Alice has a private subnet (192.168.1.0/24) connected to a router which is also connected to local network B. Alice's router performs NAT (only using MASQUERADE; outbound ...
-4
votes
1answer
430 views

Is it possible to Use someone public IP? [closed]

I am quite aware of the networking. But I have a confusion which I am searching over internet but did not come to any solution. Can we assign any specific IP to our PC or any device. Like I want to ...
1
vote
0answers
1k views

Gargoyle (OpenWRT) firewall routing for VPN

At present I have Gargoyle setup on my WNDR3700 to connection to a VPN provider in order to provide a little privacy. However this prevents me from connecting remotely to my home network. Previously I ...
1
vote
1answer
306 views

is it possible to intercept network packets outside lan?

User A is in a different country than user B and they have different IP ranges and ISPs. Is it possible for A to intercept B's communication sent to a third party, without using techniques like ...
1
vote
4answers
240 views

Does a WAN to LAN Route Conversion Through a Router Adds Security? [duplicate]

Use of a Router is the first solution for adding a security layer to any LAN with N machines, connected to the internet (through its firewall settings). My question is does the WAN to LAN conversion ...
8
votes
1answer
2k views

Vulnerabilities of pure NAT without firewall

Following some of the comments on this question, I was curious about the security vulnerabilities of NAT. There are similar threads here and here but they discuss router vulnerabilities rather than ...
5
votes
3answers
2k views

How to track back a dynamic IP address?

Is there a way to trace back who was using a public dynamic IP address previously? Would it be possible to find out the MAC address of the host using the IP address at a given time? (e.g., can you ...
1
vote
0answers
223 views

SDN Security - why not attack the controller itself?

I have been looking into SDN (Software Defined Networking) and one advantage of using this is to be able to redirect traffic to stop DDoS attacks. The traffic is ultimately thrown away. My question ...
1
vote
2answers
111 views

Safety of routing a network to a firewall

I am studying for my CompTIA Security+ qualification and have come across the following question. Question : You are implementing a testing environment for a development team. They use several ...
21
votes
5answers
6k views

How secure is binding to localhost in order to prevent remote connections?

Let's say we're running a service that's bound to localhost (127.0.0.1), and the goal is to only allow local clients (i.e. from the same machine only) What techniques might be used to break this ...
6
votes
1answer
15k views

Understanding OpenWRT LuCI Firewall Routing with VPN

I'm still fairly new to networking, and I'm having a little trouble grasping some concepts of the proper firewall rules I need to implement for my desired setup. I'm setting up a router with OpenWRT ...
14
votes
1answer
1k views

Attackers of Google DNS hijacking

As we know Google DNS server (8.8.8.8) in 14th and 15th March was hijacked in Sao Paulo. And subsequent to this event, BGPmon.org announced an alert. Now, In a course assignment, we are asked to find ...
5
votes
2answers
8k views

How can I obtain the internal IP of a computer behind NAT but reachable via certain TCP port?

I want to obtain internal IP of a remote computer behind a NAT that I can reach by using some port, say myhost.farfar.away port 11122TCP: C:\>telnet myhost.farfar.away 11122 SSH-2.0-OpenSSH_6.6....
8
votes
2answers
346 views

Why does Tor use a new route every few minutes

As far as I know, Tor selects three new nodes every few minutes. What is the advantage of this? The only thing I came up with was to prevent "Bad exit nodes" from viewing too much of your (hopefully ...
1
vote
1answer
251 views

Traffic anonymization through routing - software and algorithms

I stumbled upon an interview with "the grugq" in which he is talking about how hackers anonymize their traffic, i.e. hide their original ip address (- this is also what I will mean by "anonymizing" in ...
0
votes
1answer
656 views

How to turn of telnet and FTP on Thomson 789vn router? [closed]

I have run a port scan against a Thomson 789vn router and have noticed to my surprise that its HTTP as well as telnet and FTP ports are open. How can one turn off telnet (also FTP) using the router's ...
0
votes
1answer
103 views

unfamiliar IP when logging into ssh server

I just noticed something today, and Now I am curious... I was on my shell server, an i was wondering who was on, so I gave the command $w and saw this: j0h@server:~$ w 22:06:02 up 18 days, 7:02, ...