We changed our privacy policy. Read more.

Questions tagged [tcp]

Transmission Control Protocol (TCP) is a transport layer protocol that provides a connection-oriented data stream service with guaranteed, in-order delivery.

Filter by
Sorted by
Tagged with
0
votes
2answers
83 views

Tool for injecting data in existing tcp connection

I would like to perform arp spoofing on an existing tcp connection between a server and a client and perform a mitm attack. In addition to altering existing packets, I would like to be able to inject ...
28
votes
3answers
11k views

Disadvantages of replacing TCP/IP with blockchain

I read this blog (cached version) (and the related cached tweet) about replacing TCP/IP with blockchain. Tweet: The Internet has a serious fundamental flaw: the transmission control protocol/internet ...
1
vote
1answer
104 views

Real-world application of network steganography

I recently came across a topic of network steganography, mostly connected with modifying the headers of IP, TCP, ICMP. I was looking for some real-world examples of malware that uses it. I only found ...
0
votes
1answer
66 views

Can Mirai scan reach devices behind routers?

I recently saw this article of a version of Mirai being spread to Android based devices via ADB enabled. My question relates to how Mirai does scanning. Lets assume I have a Android based device (like ...
0
votes
2answers
89 views

What prevents this specific type of attack from being viable?

Imagine a user has an ip of 1.2.3.4 The server the user intends to connect to has an ip of 2.3.4.5 An attacker has a machine with a promiscuous network card on the user's local network. The attacker ...
0
votes
1answer
75 views

Why ACK flood is effective?

I understand that SYN flood is effective due to how protocol works, waiting around 75 seconds before closing the connection. What about ACK flood, what does it happen on the destination side that ...
0
votes
1answer
2k views

What is insecure about the "insecure" option of NFS exports?

Why is it considered insecure for an NFS export to allow connections originating from high ports? Compare the manual: exportfs understands the following export options: secure This option requires ...
0
votes
1answer
135 views

Spoof IP address after a TCP handshake established

Is it possible to spoof the IP once a TCP handshake was performed successfully? For example: Perform the handshake Use the session with the same IP which performed handshake but on different machine ...
0
votes
0answers
39 views

How to identify the usage of the tcp/ip Trek Stack

In order to mitigate the potential exposure to ripple20 zero-day, I must identify the device/s that have the Trek TCP/IP stack installed. Can I do this with software like LanSweeper? Or must I check ...
1
vote
1answer
1k views

Decoding TCP Packet in wireshark [closed]

There is a small piece of code that is making request to Web server through socket. i am able to see that its a TCP over no SSL through wireshark. My question is, Is it technically possible to see ...
0
votes
1answer
42 views

IPC Security on Server [duplicate]

An application is running in a customer's environment on a single server and consists of a collection of Windows Services that communicate with each other using (unencrypted) TCP messages. Although ...
0
votes
1answer
460 views

Suricata - How to use TCP Flags?

I wrote the following rules: alert tcp any any -> 192.168.6.4 any (msg:"SYN"; flags: S;) alert tcp any any -> 192.168.6.4 any (msg:"FIN"; flags: F;) The SYN rule is matching....
1
vote
0answers
39 views

How can I ascertain that .NET NegotiateStream [MS-NNS] established a secure connection?

I have a WCF (Windows Communication Foundation) application using the netTcpBinding. Server configuration: <netTcpBinding> <binding name="defaultNetTcpBinding"> <...
1
vote
1answer
66 views

Outgoing messages while under massive denial-of-service attack

As I understand it, there is no internet protocol that provides true broadcast like in say a card game or a partially synchronous network assumption. How close can internet protocols come though? We'...
0
votes
1answer
164 views

Intensive 586 (ms-shuttle) port scan/exploit/hacking attempts

Recently i wanted to play a bit with TCP/UDP networking (and touch some custom HTTP server impl) on C# and found out that i'm getting requests from totally unknown dudes, such as this one: FROM: [::...
1
vote
1answer
140 views

Intercepting TLS 1.2 connections

I have an application that communicates with the server through a TCP TLS 1.2 connection. The app probably uses certificate pinning. I want to intercept this traffic. Is there any way to decrypt the ...
0
votes
1answer
116 views

Is TCP's 3-way handshake a kind of mutual authentication?

Assuming no one is able to inspect or MITM in the network. Can I see it as a way to ensure the source IP in packet's header is the real source of the packet, so a kind of authentication ?
0
votes
1answer
59 views

How To Validate Secure Traffic from Chrome with Element To Matrix.org on Linux

Are you familiar with the Element chat system of https://app.element.io ? Are you familiar with its connections to Matrix.org (for a free account)? Is there a way that I can sniff this traffic on the ...
1
vote
3answers
93 views

Exposing different services on the same port

My current project contains multiple heterogeneous TCP servers, but our IT guys have clearly declared that they will give me only one 443 port, which is fair enough. Two options are on the table now. ...
0
votes
2answers
128 views

Does an attacker need to guess or brute-force a password for TCP spoofing?

From my understanding, TCP spoofing can be carried out if the attacker can correctly guess the sequence numbers from the response packets (to mimic the real client). The attacker may even obtain this ...
0
votes
2answers
77 views

How Can I Prevent Hackers From Spoofing TCP messages onto my server?

I have a Python client and server communicating over a TCP socket - they send and receive a certain set of standardized string commands to each other. How can I prevent a hacker from creating their ...
0
votes
0answers
984 views

How to Spoof JA3 Signature?

I am using python requests library to make HTTP calls. However website bot detection is using JA3 fingerprint verification and blocking me. Is there any way I can spoof the JA3 signature.
-2
votes
1answer
217 views

HTTP/3 No more TLS or TCP [closed]

I was reading documentation about HTTP/3, and in the article, they sed that they are no longer TLS or TCP. So it's mean that a web site with no SSL 80 will be changed to what port and 443 will be ...
1
vote
1answer
119 views

Meterpreter Session died [Bwapp]

I just set up a lab with bwapp and wanted to jump straight into webshell. I used Unrestricted file upload vuln --> uploaded my perfect shell created with msfvenom. My only problem is that my ...
0
votes
0answers
74 views

What happens if a sender changes the TCP window size over multiple packets that have the same ACK number?

I'm currently doing research on evasion attacks that seek to bypass a Deep-learning based Network Intrusion Detection System. In order to achieve this, I need to know what the constraints are for the ...
1
vote
1answer
248 views

Can TLS defeat the manipulation of TCP sequence numbers?

Assuming there is a powerful adversary who can arbitrarily manipulate the sequence number of each tcp packet, then the following packet-reorder attack should be possible, right? Assuming the packet ...
0
votes
0answers
175 views

Bettercap TCP proxy upstream server

I am using bettercap command line to perform a Man in the Middle attack on my LAN network with an EDUCATIONAL purpose (of course!). I want to intercept the TCP traffic, with the intention to view on ...
1
vote
1answer
70 views

How to avoid password TCP message sniffing and subsequent hijacking

I'm developing a TCP Streaming API for "IoT" devices in LabView. The TCP Server will be listening to a certain port, and our devices will try to connect to it. In order to know that the connecting ...
1
vote
1answer
98 views

Does the DICOM file header gets lost when transferred over the network?

I am currently investigating the PEDICOM vulnerability CVE-2019-11687 where I am trying to reassemble the P-DATA DICOM fragments from a PCAP. Since the vulnerability takes advantage of writing bytes ...
-1
votes
2answers
598 views

When connecting via SSH, does the Diffie-Hellman key exchange take place over an unencrypted TCP session or does encryption occur before the exchange?

I'm a cybersecurity student and I'm eager to understand the basic processes of an SSH session. I wrote down the stages to the best of my ability but need help understanding what happens right after ...
1
vote
2answers
125 views

What is the most powerful type of DDOS/DOS attack? [closed]

What I mean is what protocol are best to DOS something like TCP, UDP, HTTP?
0
votes
1answer
3k views

What is bindshell backdoor?

I just found out a bindshell backdoor, but I don't know how to access/connect to it using Metasploit. I'm a beginner with exploiting; is there a way to access the backdoor? I tried to search for "...
1
vote
1answer
12k views

Microsoft DS vulnerability?

I heard that Microsoft DS is a port that is commonly used by hackers to hack computers due to its ability to transfer files. How do they transfer files with Microsoft DS? Do they need an exploit to ...
-1
votes
3answers
8k views

Is TCP Port 80 (HTTP) vulnerable?

I heard hackers' top ports to hack computers through are port 80 and port 443. How do they do this though aren't port 80 and port 443 just for HTTP requests such as GET, POST?
0
votes
1answer
1k views

How to decrypt Diffie-Hellman in wireshark?

How can i decrypt Diffie-hellman TCP packets? I'm trying to make a tool that shows cleartext response from a server that uses this encryption. However when i look online people all seem to say it's ...
2
votes
1answer
2k views

Intercepting TCP traffic through MITM attack

I'm trying to capture TCP requests through Burp Suite with this hacky method. Basically it listens for user selected protocol requests (TCP/UDP) and then forwards them to Burp Suite (or any other ...
1
vote
2answers
4k views

Block SYN,ACK response with iptables

I have a virtual environment and I am making a SYN flood attack to a Ubuntu Server's port 53 using Kali 2020. I realized that a countermeasure for this attack is to limit or block the responses to ...
-1
votes
1answer
20 views

When are the stateful table entries for the stateful firewall created? [closed]

We know the TCP 3-way handshake: C->SYN->S C<-SYN-ACK<-S C->ACK->S we also know stateful firewall. When a stateful filter entry(source ip, source port, dest ip, dest port) create? ...
0
votes
0answers
62 views

Spawned reverse shell will not run additional commands

I am new to this, so I applogise if this is a silly question! I have created a reverse shell on a Windows box using an exploit script and the following MSFVENOM to create a reverse shell. msfvenom -...
0
votes
1answer
276 views

Why is SNMP vulnerable to IP Spoofing?

I read on Wikipedia's Article on SNMP SNMPv1 and v2 are vulnerable to IP spoofing attacks, whether it runs over TCP or UDP, and is a subject to bypassing device access lists that might have ...
0
votes
2answers
188 views

Why do firewalls focus on tcp and udp?

From what I can see, most firewalls seem to focus on tcp and udp. Why is that? Is it impossible or at least very unlikely for malware to use other protocols/custom protocols?
0
votes
1answer
140 views

Is it possible to intercept and modify a wireless TCP transmission?

Given three parties (all in the same LAN): A client, a server, and a MITM. The client and server communicate wirelessly, and don't encrypt their messages. The MITM can see the messages, but question ...
2
votes
0answers
736 views

TCP reset attack / forged TCP reset prevention

How do you prevent someone from doing an TCP reset attack between client and host without having acess to host? I am trying to solve a CTF for fun and learning purposes. In one of the challenges I ...
2
votes
1answer
275 views

What are the security concerns about using unencrypted TCP keepalive with TLS?

In my software both the server and the client sends unencrypted TCP keepalive messages to be able to detect the broken pipe within a reasonable time. It also uses TLS 1.3 encryption with OpenSSL 1.1.1....
1
vote
0answers
14 views

Capture Packets of other devices in network [duplicate]

I'm challenged to capture packets sent from a client to the gateway in a network. is it even possible to see the packets between client and gateway for me?
-3
votes
1answer
98 views

Is there any service/application which would detect the encryption type? [duplicate]

I am debugging a TCP connection, which returned multiple values such as: +†Ä˜Õõıû and 'G1÷ù]TB*ø5£"ñB—£s∏f '1÷ù] What I am trying to find out, is how is this encrypted, and find a way to ...
2
votes
0answers
90 views

Reverse TCP - Bind to a specific port

So, I'm trying to solve a CTF challenge that involves exploiting a remote service. The service doesn't check for the size of the input and there is a buffer overflow vulnerability. However, before I ...
1
vote
0answers
862 views

Http Content-Length too long - Time Out

I was recently going through the HTTP Desync attack presented here: https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn This raised one question concerning the way the HTTP ...
1
vote
1answer
92 views

Logging new network connections without TCP Wrappers

My current job involves auditing systems for compliance with various policies. One of these policies is that all network connections must be logged, so that the origin of the connection (IP address ...
0
votes
2answers
78 views

firewall behaviour

If a client connects to a server he will start listening for the response on some random high port number. The client then expects any packet destined for that port to be a valid answer. Or does he ...

1
2 3 4 5 6