Questions tagged [routing]
Routing is the process of moving packets across a network from one host to another. It is usually performed by dedicated devices called routers.
150
questions
1
vote
0
answers
54
views
Using Android Wireless Hotspot while connected to Hotel internet via VPN
I want to make sure I understand the security implications of this scenario:
I am staying in a hotel.
I have a VPN on my android phone.
I connect to the hotel's unencrypted WiFi network with the ...
- 638
0
votes
0
answers
10
views
Is IP routing subject to data transfer laws? [migrated]
Some regions and territories have data sovereignty and localisation laws that prevent, for example, personal data from being transferred outside of that jurisdiction. Do such laws, if they even ...
- 143
0
votes
0
answers
144
views
Can my employer detect that I am using a torrent client on my home pc while teleworking? [duplicate]
I am working from home with a 'work' laptop, connected through a VPN client to my company and also to the customer networks.
I also have my 'home pc' on the same home network.
Both computers are ...
- 128k
1
vote
2
answers
3k
views
What information does a standard router see?
I currently use my neighbours' WLAN (with their permission). It uses WPA2 and the DSL router is a Fritz!Box 7170 (see English manual).
What information can a router admin user possibly see without ...
- 128k
2
votes
1
answer
3k
views
CIS recommendations - disabling ip forwarding
I am looking through the CIS recommendations for debian 8.
In a CIS compliance test using nessus, I see that the test for disabling ip forwarding has failed. But when I look at the system, I can see ...
- 2,265
1
vote
0
answers
26
views
How do I reach the "remote" web app using IP routing? (locally reaching another subnet with VPN to get to an app) [closed]
I have a PCAP basically stating two things:
An ARP request who has 192.168.a.b? Tell 192.168.b.c
An ARP answer with the MAC address follows of course.
The following requests all access an web app, ...
CommunityBot
- 1
1
vote
2
answers
72
views
What is the better tunnel endpoint?
I'm trying to understand the consequences or implications of setting up tunneling endpoints for the below topology. The tunneling may be used for anything (encryption, VPNs, etc.) assuming the general ...
- 230
0
votes
1
answer
146
views
Can attacker gain access to my private network application through pivoting and/or lateral movement?
I am using a public wifi network.
When I start a nodejs express server at my local system at port 3000, I can access that website on another device (that is connected to the same public wifi network) ...
- 22.7k
5
votes
2
answers
11k
views
How can I obtain the internal IP of a computer behind NAT but reachable via certain TCP port?
I want to obtain internal IP of a remote computer behind a NAT that I can reach by using some port, say myhost.farfar.away port 11122TCP:
C:\>telnet myhost.farfar.away 11122
SSH-2.0-OpenSSH_6.6....
- 1
9
votes
4
answers
13k
views
How is Tor secure despite being open source?
If Tor is open source (and thus its process of concealing your IP is known), then how does it keep anything secure? Couldn't someone look at the source code and figure out how to reverse the routing ...
- 66.5k
0
votes
1
answer
62
views
How routing protocols deal with malicious or faulty routers?
I know very little about Internet Protocol or networking in general but my understanding is that, at a very high level, the routing works by routers telling other routers how "fast" they can ...
- 6,898
0
votes
1
answer
190
views
how does a DNS request sniffer see packets destined for DNS server?
If a DNS sniffer/spoofer is running on a network using something like netwag/netwox, how does the sniffer see the request that is destined for the real DNS server?
Wouldn't the packets for the DNS ...
- 199k
2
votes
1
answer
3k
views
Loki How to crack the password hash OSPF?
I have created for myself a lab of routers in GNS3 . Routing protocol between routers is OSPF.
Now,by Loki penetration testing, I found that routers are the feature authentication.
Using wireshark, I ...
CommunityBot
- 1
0
votes
1
answer
538
views
How to block all inbound traffic from a specific Internet address or subnet using TomatoUSB router software (LINUX based)
I'm not trained in Linux, but I think I found the solution to my problem documented, but it is not working as expected. I am NOT an iptables guru, I'm learning as I go.
A Russian IP is trying to ...
CommunityBot
- 1
0
votes
1
answer
110
views
Should I be seeing network management protocols on 'user' subnets?
When performing a passive packet capture of a network, I have seen a large amount of traffic being broadcast using different protocols. These protocols are primarily used to perform some kind of ...
- 2,055
0
votes
1
answer
2k
views
Communicating routed interfaces for Cisco ASA 5506-X [closed]
Recently our organisation has been supplied a new ASA 5506-X to replace the old good PIX506e for a project.
We have encountered a problem on routed interface on ASA 5506, which is very different from ...
CommunityBot
- 1
8
votes
1
answer
1k
views
Routing Protocol Encryption
As far as I know 'newer' versions of routing protocols support authentication between routers.
What about encryption and integrity checks? Some implementations like this one from Cisco use MD5, which ...
CommunityBot
- 1
2
votes
3
answers
12k
views
For security reasons, can I block ping response on my router without disabling my network?
I seem to have a serious problem of being attacked and after looking up the attack source, 99% come from China, then Korea, Hong Kong etc. Here is a fraction of the report from my Router, which is a ...
9
votes
5
answers
24k
views
Is dd-wrt generally more secure than manufacturer's firmware?
I have been advised to use dd-wrt, for richness of features and heightened security.
The argument about security is that major manufacturers don't care much about the firmware, release with a lot of ...
0
votes
1
answer
335
views
How to prevent a web application from accessing local URLs (SSRF) [duplicate]
In our web app the users can specify a URL that the server will access later (POP3 access and browser push notifications).
This means the web app does a network request to a user-chosen server. The ...
- 103
0
votes
0
answers
167
views
Routing a site-to-site VPN through my regular VPN service
currently engaged in live competitive red vs blue team exercises in an enterprise style Windows AD environment. My device runs a modern Debian Linux OS.
cscotun0
We typically connect to the lab/domain ...
- 1,769
1
vote
2
answers
5k
views
How to find a "secret" gateway
I'm practicing penetration testing and I'm in front of a basic routing exercise.
The context is the following: I'm using a virtual machine with Kali Linux from which I connect in VPN to the network ...
1
vote
1
answer
2k
views
How to conduct a disguised LSA attack against OSPF?
I want to do disguised LSA attacks on OSPF network and be able to more analyze, so I do not know how it works in practice. This is a penetration test.
The attack is described in the address [+]. I ...
- 1
6
votes
3
answers
29k
views
Ping Blocking: How to do? How to break?
I can access each page of a site through the browser (firefox). I can also see the ip and port address in firebug, but when I open cmd->ping site ->it says "request timeout".
I also ...
- 128k
4
votes
3
answers
52k
views
Can someone take money out of my account with just my Account & Routing number?
I had recently given someone my account number and routing number to deposit money into my checking account. They owed me money I had lent and said this would be the easiest way for them to do it. I ...
- 1
1
vote
2
answers
399
views
What is the risk of my VPN traffic routing through China?
I recently set up a new VPN on a Hetzner VPS (using Wireguard). It works fine, but I notice that when I do a traceroute from home to the server, I see several Chinese intermediaries.
I'm not too ...
- 222
6
votes
3
answers
8k
views
What are the security implications of net.ipv4.conf.eth0.route_localnet=1 / route_localnet?
sudo sysctl -w net.ipv4.conf.eth0.route_localnet=1
What are the security implications of route_localnet?
- 62.1k
12
votes
3
answers
47k
views
Is NAT Loopback on my router a security problem?
Some DSL routers prevent NAT loopback. Security is sometimes cited as the reason. Is NAT loopback really a security issue? And if so, how is this exploited?
NAT loopback... where a machine on the LAN ...
- 21
0
votes
0
answers
223
views
Open Ports at ISPs Gateway
I am working to set up OpenVPN access to my home network. To do this, I had to contact my ISP, because they had the necessary port blocked at the Gateway/Router that I do not have access to.
In my ...
- 1
38
votes
2
answers
50k
views
What are the security implications of enabling UPnP in my home router?
I found port forwarding entries in home router that I haven't manually configured. Is that because of UPnP?
Are applications simply able to tell the router to forward ports on their own? Are there ...
- 103
3
votes
3
answers
815
views
Is a router without inbound firewall a security issue across the internet?
Imagine this scenario: Alice has a private subnet (192.168.1.0/24) connected to a router which is also connected to local network B. Alice's router performs NAT (only using MASQUERADE; outbound ...
CommunityBot
- 1
2
votes
2
answers
1k
views
How do Cisco devices identify routers?
Our network administrators forbid the usage of private routers in our college. They bought new Cisco equipment (routers, switches) which detect routers and automatically ban them (it disconnects the ...
- 1,492
1
vote
1
answer
271
views
Other computers/customers of my Internet Service Provider appears under my "Network" section in Windows Explorer
I could see many computers under "Network" section on the left sidebar of Windows Explorer, but I am the only one who uses computer on my home.
So I suppose all those computers are also using the ...
- 46.4k
2
votes
3
answers
264
views
What happen when a local device have the same IP as an external website
When I enter 'google.com' in my web browser, my computer goes to the DNS server and gets Google's server IP address, then it look for that address in the local network and when it doesn't find it it ...
CommunityBot
- 1
1
vote
1
answer
414
views
Traffic anonymization through routing - software and algorithms
I stumbled upon an interview with "the grugq" in which he is talking about how hackers anonymize their traffic, i.e. hide their original ip address (- this is also what I will mean by "anonymizing" in ...
- 66.5k
2
votes
1
answer
389
views
Can we use network hub as an MITM sniffing device?
My intention is to analyze all network traffic which is coming to and originating from a network connected device I have. From the configurations of the device I am able to proxy all the HTTP traffic ...
- 5,100
2
votes
1
answer
269
views
Routing traffic through compromised host
I have a shell in a remote machine. I want to route my traffic in a dynamic way, so that can access say https://www.google.com via the IP address of the previously mentioned compromised machine.
I ...
CommunityBot
- 1
0
votes
1
answer
138
views
Secure Routing without relying on Cryptography? [closed]
Is anyone aware of a routing protocols for Ad Hoc Networks (such as OLSR, AODV, ZRP) which are secure without relying on pre-established key management? What I mean by secure is, preventing data ...
- 11
2
votes
4
answers
9k
views
Can anyone tell if a wireless router is plugged into an Ethernet port (without actually seeing it)
In a large network if there is an Ethernet port in the wall, is it possible to tell if a switch or wireless adapter is plugged into it? (I'm talking about the cheap home routers - with the built in ...
CommunityBot
- 1
5
votes
1
answer
5k
views
Sending Probe Request Frames | Receving Probe Response -- Scapy
OBJECTIVE
Send probe request frame subtype=4 and receive probe response subtype=5 with Scapy
Ultimate goal is to detect access points nearby via Scapy ( not by sniffing beacon frames )
The object ...
CommunityBot
- 1
0
votes
1
answer
297
views
Why do I have a specific route for this strange IP?
I use ubuntu. The only apps I have in it are firefox and telegram, both downloaded through official channels. I use other apps with virtualization, so my main machine is mostly clean.
I use a VPN so ...
- 415
0
votes
1
answer
860
views
Man in the Middle how to read incoming traffic for victims on the network
i was just testing something about MITM i know MITM well
attack is just like:
gateway = 192.168.1.1
victim = 192.168.1.13
attacker = 192.168.1.6
performing mitm and enable linux kernel ip_forwarding ...
CommunityBot
- 1
2
votes
0
answers
787
views
Random Alphabetical String Added to URL
I originally asked this question over at Stack Overflow, but someone there suggested asking here because it might be possible that something malicious may be causing the following issue:
Users have ...
- 63
2
votes
2
answers
1k
views
Do household IPv6 addresses introduce vulnerabilities? [duplicate]
Apparently, for half a year already at least, my ISP has assigned me IPv6 addresses. I discovered this accidentally, while editing Wikipedia. So it seems my ISP started to support IPv6 addresses and ...
- 901
7
votes
4
answers
5k
views
Can the loopback interface be hijacked?
Inspired by this question I came up with this weird idea of making what that user actually wants to prevent. So, bear with me for a little bit:
Let's assume that for some reason we could make the ...
26
votes
5
answers
10k
views
Access to a router's GUI
During a recent visit to a coffee shop, I noticed that they hadn't bothered changing their default user name and password for their router.
I realise that someone could log on and be annoying to ...
1
vote
2
answers
756
views
What can I do to prevent BGP hijacking as an admin of some OVH's VPS?
I am an operator of some public service which is run on some OVH's VPS.
Recently I was contacted by an anonymous contact, who suggested that the service was BGP-hijacked and some sensitive info of ...
- 66.5k
1
vote
0
answers
2k
views
Creating a rogue AP with Kali Linux
so i have for the last 2 days going through this task of setting up a Rogue AP on my Kali linux running in my VM.... i am using the 64bit version and the wifi adapter is TP link TL WN722N, so my ...
- 152
0
votes
1
answer
2k
views
Web server responding to an HTTP request from a spoofed IP address
Hypothetically speaking - if my web server gets an http request for a given file, say default.html, and let's say the requesting IP address has been spoofed, what happens when my server responds to ...
- 199k
5
votes
1
answer
372
views
What is the simplest way to prevent adding a new default route via dhcp?
I have a corporate network to which remote access is provided via openvpn. Customers include a variety of devices (laptops, smartphones).
These devices running software that accesses corporate ...
- 16.1k