Questions tagged [tcp]
Transmission Control Protocol (TCP) is a transport layer protocol that provides a connection-oriented data stream service with guaranteed, in-order delivery.
317
questions
-1
votes
1
answer
55
views
TCP packets containing machine code
Is it possible that an attacker puts machine code on a TCP packet? In a way that before passing to the CPU and getting an error that such a function doesn't exist on the application, it first needs to ...
0
votes
2
answers
53
views
Modify the protocol of a packet
Is it possible that for example there is a TCP packet, and using a proxy, you intercept it and using a tool you change the protocol entirely? Like for example from TCP to UDP or any other custom ...
0
votes
1
answer
55
views
Arbitrary command execution on remote devices
Is it possible to send a TCP payload to an open port that executes a specific arbitrary command on the target device using Metasploit or any other program? For example with Windows 10 Server OS?
I ...
0
votes
0
answers
32
views
Securing an internal tcp proxy
I am developing a TCP-Proxy in C#/.NET using dotNetty (Port of Netty). The proxy is translating messages between two different systems. It will be hosted on a server in the company network, so it is ...
- 101
1
vote
0
answers
83
views
Possible to determine who on the Internet is resetting (RST) my TCP connection? [closed]
I am investigating censorship in India, and know with a high degree of confidence that it is being blocked based on the SNI extension in the TLS ClientHello.
I am in control of both the Client (in ...
- 63
1
vote
1
answer
77
views
Next movement in IoT pentest when you have restricted information
I am a newbie cyber security engineer working on IoT. Today, a task is given to me. The task was making pentest to a cooker. Because of the privacy, I cannot share the brand of the cooker. The cooker ...
1
vote
0
answers
133
views
How would you hide yourself whilst conducting a scan on a target network to identify open service ports?
I am working on this question which asks how you would conduct a scan of a target network to identify open service ports without revealing your IP address. It wants details such as IP address ...
- 111
1
vote
0
answers
137
views
Security Implications of Allowing TCP Forwarding to Use vscode-server
While setting up a new VPS instance running Ubuntu, I found that I needed to set AllowTcpForwarding yes in /etc/ssh/sshd_config to achieve a remote VS Code connection. I am and will be the sole user ...
- 111
1
vote
0
answers
31
views
What is sequence number and why is it used as the ACK number for the next ACK packet? [closed]
I am currently trying to learn the TCP session creating (3 way handshake) process in detail. I was wondering what the sequence number means and also why is the ack num for the next ACK packet always ...
- 11
1
vote
0
answers
620
views
SSL handshake failure | Client hello(success) -> Server ACK (success) -> server RST (connection closed)
I was running MQTT broker in my pc and tried to connect to it via mqtt client in same PC. using x509 cert for mutual tls. SSL Handshake was failing with RST from server. This was happening only in my ...
- 11
0
votes
1
answer
32
views
Would XerXes be effective without sending anything over the connections it opens?
From what I gathered, the gist of XerXes is doing this (snippet in Python):
with socket(AF_INET, SOCK_STREAM) as s:
s.connect((host, port))
s.send(b"0")
simultaneously, i.e. ...
- 137
6
votes
4
answers
859
views
How can non-root intercept privileged loopback ports?
Please walk through how an attacker can intercept Chrome's connection to 127.0.0.1:999, as suggested by the warning below.
This warning is consitently displayed across many versions of Chrome in many ...
- 379
1
vote
0
answers
54
views
Does it ever make sense to use TLS for communication that only happens internally on one machine? [duplicate]
If two processes on the same machine communicate over TCP, is it possible for different users to listen in on this communication?
- 537
0
votes
2
answers
155
views
What can a hacker do with my tcp connection?
I have a tcp server at Google cloud platform. This talks to my clients under a dynamic encryption key that will change after each time they talk.
The only thing that happens between the server and the ...
1
vote
0
answers
156
views
Help with a pentesting lab [closed]
I am a graduate student working on a pen testing lab that I am having the hardest time understanding. I am given a link to a Kali VM and told the following as a preamble to the lab.
You were recently ...
- 11
0
votes
0
answers
18
views
Nmap scan using default script scan and version detection fail [duplicate]
I am running the following scan using -sC -sV on a target:
sudo nmap -sC -sV XX.XX.XX.XX
PORT STATE SERVICE VERSION
53/tcp open tcpwrapped
80/tcp open tcpwrapped
443/tcp open tcpwrapped
I ...
0
votes
1
answer
82
views
Honeyd not responding to TCP
I'm having some issues getting Honeyd to work properly on an external network interface on Ubuntu 20 LTS running on a Proxmox server. I'm fairly sure it's a configuration/setup problem on the VM I'm ...
- 1
2
votes
1
answer
560
views
How SSL Protects against Replay Attacks?
Reading: https://mulloverthing.com/how-does-ssl-protect-against-replay-attack/ it says:
The SSL/TLS channel itself is protected against replay attacks using
the MAC (Message Authentication Code), ...
- 19
1
vote
2
answers
306
views
TCP with IP Spoofing, Is It Really Impossible?
I was reading: IP Spoofing with real IP when TCP 3-way handshake has been made
Where the answer says:
First of all, every TCP packet has a sequential identifier, which
starts at a random position. (...
- 11
0
votes
0
answers
3k
views
How to decrypt a tls1.3 tcp packets in wireshark
I generated the public and private key with
openssl req -x509 -nodes -days 365 -newkey rsa:4096 -keyout server_key.pem -out cert.pem
and I am using c sockets for the server and client with openssl, ...
- 1
0
votes
1
answer
10k
views
I am trying to exploit port 7000/tcp afs3-fileserver
I have been trying to exploit a cheap smart tv box that I have bought a while ago and after my nmap scan I found that port 7000/tcp was open but researching about the port gave back not much ...
- 1
1
vote
0
answers
95
views
When passing through SSL from web server A to web server B (via nginx), does web server A need SSL configured as well, or just web server B?
I'm using nginx here as an example, but this is really more of a conceptual question about SSL termination and TCP that could apply to any web server.
Basically, if web server A receives TCP traffic ...
- 111
0
votes
1
answer
169
views
Detect port forwarding
If there are 3 machines A, B and C and A communicate directly with B (A -> B) but B is executing port fordwarding with the next command
socat TCP4-LISTEN:443,fork TCP4:<ip machine C>:443
So ...
- 43
1
vote
1
answer
519
views
Spoofing TCP/IP headers and uniqueness of the host name
I have some related questions:
Is it possible to spoof the source address in the TCP/IP header when using HTTPS?
If possible, is there any way to detect source address change? I think the checksum is ...
- 309
0
votes
1
answer
965
views
SCP to create security groups in member AWS account
I'm trying to create a SCP to restrict member account users to create/modify security group(s) that have inbound rule for SSH/RDP with Source set as 0.0.0.0 or ::/0.
Basically, I want users to SSH ...
- 525
1
vote
1
answer
297
views
Repeated DUP ACK and RST to same TCP SEQ and ACK
I started noticing this behaviour for more than a month. Whenever I connect my laptop to the WiFi router there are lots of RST and DUP ACKs up to the same TCP sequence, as given in the example below, ...
- 11
0
votes
1
answer
133
views
The router (that my PC is connected to) is continuously attempting to connect through TCP80. What would be the reasons?
I have no access to the router nor do I have any administrative access to this local network. But every 5 minutes the router attempts to connect to my PC through port 80/tcp, and it attempts exactly 4 ...
- 1
0
votes
1
answer
481
views
How to properly secure a tcp server/client application
I have developed a multithreaded server/client python application, my next goal is to encrypt the traffic between both parties but I can't tell where should I invest all my research energy in
Using ...
0
votes
1
answer
335
views
Can my ISP or government listen to my Skype calls?
Is the call encrypted with something like HTTPS to prevent a corrupt government (or ISP) from messing with the DNS routing, sniffing, snooping etc? Can my ISP or government listen to my Skype calls?
I'...
2
votes
2
answers
213
views
Is an open TCP port that doesn’t take input secure?
I have written a simple C program (~30 lines) that opens an internet socket and sends data to the client on every connection. The program never read()s from the socket; it just parses the /proc ...
- 123
3
votes
1
answer
2k
views
ARP spoofing on TCP and UDP
Statement (In Interview):
ARP spoofing attacks are more effective for UDP packets rather than
TCP packets since TCP establishes reliable communication channels.
I have opposed the statement saying ...
- 153
2
votes
1
answer
168
views
Is this TCP socket encryption and password storage implementations secure enough?
I'd like to know if this communication technique is secure enough against attacks, both on the connection itself and the password-storing procedures.
Both the client and the server have access to 2 ...
- 23
0
votes
1
answer
460
views
Can't find anomalies / abnormalities in wireshark capture
Previous post was deleted for not enough context, which I apologise for. I will try to provide as much context as I can. I am aware this appears to be an example of a SYN flood attack with spoofed ip ...
0
votes
2
answers
474
views
Tool for injecting data in existing tcp connection
I would like to perform arp spoofing on an existing tcp connection between a server and a client and perform a mitm attack. In addition to altering existing packets, I would like to be able to inject ...
28
votes
3
answers
12k
views
Disadvantages of replacing TCP/IP with blockchain
I read this blog (cached version) (and the related cached tweet) about replacing TCP/IP with blockchain.
Tweet:
The Internet has a serious fundamental flaw: the transmission control protocol/internet ...
- 457
1
vote
1
answer
193
views
Real-world application of network steganography
I recently came across a topic of network steganography, mostly connected with modifying the headers of IP, TCP, ICMP. I was looking for some real-world examples of malware that uses it. I only found ...
- 111
0
votes
1
answer
149
views
Can Mirai scan reach devices behind routers?
I recently saw this article of a version of Mirai being spread to Android based devices via ADB enabled. My question relates to how Mirai does scanning.
Lets assume I have a Android based device (like ...
- 1,095
3
votes
3
answers
209
views
What prevents this specific type of attack from being viable?
Imagine a user has an ip of 1.2.3.4
The server the user intends to connect to has an ip of 2.3.4.5
An attacker has a machine with a promiscuous network card on the user's local network.
The attacker ...
0
votes
1
answer
142
views
Why ACK flood is effective?
I understand that SYN flood is effective due to how protocol works, waiting around 75 seconds before closing the connection.
What about ACK flood, what does it happen on the destination side that ...
- 5
7
votes
1
answer
11k
views
What is insecure about the "insecure" option of NFS exports?
Why is it considered insecure for an NFS export to allow connections originating from high ports? Compare the manual:
exportfs understands the following export options:
secure
This option requires ...
- 230
0
votes
1
answer
549
views
Spoof IP address after a TCP handshake established
Is it possible to spoof the IP once a TCP handshake was performed successfully?
For example:
Perform the handshake
Use the session with the same IP which performed handshake but on
different machine ...
0
votes
0
answers
134
views
How to identify the usage of the tcp/ip Trek Stack
In order to mitigate the potential exposure to ripple20 zero-day, I must identify the device/s that have the Trek TCP/IP stack installed.
Can I do this with software like LanSweeper? Or must I check ...
- 107
1
vote
1
answer
13k
views
Decoding TCP Packet in wireshark [closed]
There is a small piece of code that is making request to Web server through socket. i am able to see that its a TCP over no SSL through wireshark.
My question is, Is it technically possible to see ...
- 43
0
votes
1
answer
150
views
IPC Security on Server [duplicate]
An application is running in a customer's environment on a single server and consists of a collection of Windows Services that communicate with each other using (unencrypted) TCP messages.
Although ...
- 123
0
votes
1
answer
2k
views
Suricata - How to use TCP Flags?
I wrote the following rules:
alert tcp any any -> 192.168.6.4 any (msg:"SYN"; flags: S;)
alert tcp any any -> 192.168.6.4 any (msg:"FIN"; flags: F;)
The SYN rule is matching....
- 3
1
vote
0
answers
139
views
How can I ascertain that .NET NegotiateStream [MS-NNS] established a secure connection?
I have a WCF (Windows Communication Foundation) application using the netTcpBinding.
Server configuration:
<netTcpBinding>
<binding name="defaultNetTcpBinding">
<...
- 111
1
vote
1
answer
122
views
Outgoing messages while under massive denial-of-service attack
As I understand it, there is no internet protocol that provides true broadcast like in say a card game or a partially synchronous network assumption. How close can internet protocols come though?
We'...
- 837
1
vote
1
answer
570
views
Intensive 586 (ms-shuttle) port scan/exploit/hacking attempts
Recently i wanted to play a bit with TCP/UDP networking (and touch some custom HTTP server impl) on C# and found out that i'm getting requests from totally unknown dudes, such as this one:
FROM: [::...
- 11
1
vote
1
answer
421
views
Intercepting TLS 1.2 connections
I have an application that communicates with the server through a TCP TLS 1.2 connection. The app probably uses certificate pinning. I want to intercept this traffic.
Is there any way to decrypt the ...
- 11
0
votes
1
answer
269
views
Is TCP's 3-way handshake a kind of mutual authentication?
Assuming no one is able to inspect or MITM in the network. Can I see it as a way to ensure the source IP in packet's header is the real source of the packet, so a kind of authentication ?
- 29