Questions tagged [tunneling]
tunneling refers to a mechanism in which one network protocol encapsulates a different payload protocol.
120
questions
0
votes
1
answer
29
views
ProxyCommand implemented in which OpenSSH Version
Scenario:
You as a pentester are in a situation where you want to do multi hopping to jump over several ssh servers to your target. The systems are somehow outdated so you want to check what you can ...
- 202
0
votes
2
answers
58
views
Are all encrypted tunnels also considered virtual private networks (VPN)?
A few days ago, a colleague and myself were having a discussion specifically on site-to-site VPNs. My understanding, and how I was taught, are that all encrypted tunnels are virtual private networks ...
1
vote
1
answer
56
views
Does opening an IPsec tunnel compromise the rest of my VPN?
Let's assume:
I allow all of my VPN users to connect to various internal services (VPN's IP is allow listed)
My VPN will be connected to a 3rd party network via IPSec Site-2-Site Tunnel. The purpose ...
- 163
2
votes
0
answers
224
views
Best way to avoid DPI/tunnel detection?
guys, I live in Russia and that pretty much says it all.
I was using a standard self-hosted VPN on a DO droplet, but now I'm afraid that since VPN usage in Russia started to spread like a wildfire ...
1
vote
1
answer
105
views
How to set up a restricted account for reverse SSH port forwarding in a safe way?
I have a server (M: Main) that I trust very much (I have it home, locked, with an alarm, etc), to which I can SSH from the internet.
I also have a number of "remote servers" and "IoT ...
- 255
0
votes
1
answer
48
views
Force connetion through SSL Tunnel [closed]
All machines are Linux-based.
I want to force ssh (or telnet) to the 192.168.100.20 server from the laptop through the SSL Tunnel. What command should I use?
- 1
0
votes
0
answers
147
views
Azure VPN through Wireguard VPN - 'Name Not Resolved'
I have setup a wireguard (WG) vpn server on a raspberry pi that connects to my home internet and I connect to this with my work laptop through a VPN router.
On my work laptop, I get access to several ...
0
votes
1
answer
91
views
Can I use a VPN to access services only available to a specific network? [closed]
I am a member of a library which has access to online databases that I use for work. The databases can only be accessed when you are on library's WIFI network. If I try to use the same databases from ...
- 1
1
vote
1
answer
537
views
Could someone the real IP address when using tunnel protocols like ngrok, localtunnel or serveo?
Could someone get the real IP address that is hidden behind the URL generated by tools like ngrok, localtunnel or serveo?
- 13
-1
votes
1
answer
102
views
How can you attack or redirect the client from the server over an RDP or SSH conneciton? [closed]
I have a penetration testing scenario where I am on the network with two machines, Machine A and Machine B. I have complete control over Machine B and am trying to leverage that to get access to ...
1
vote
2
answers
408
views
SQL Server connections with TLS vs. through an encrypted tunnel?
I'm developing an application that will connect to Microsoft SQL Server in a local network:
I'm considering whether these connections need to use TLS
Or whether to leave it to the customer's ...
- 111
5
votes
1
answer
629
views
SSH reverse tunnels: can the intermediate server eavesdrop on an SSH session?
Suppose there are three computers: (1) my laptop, (2) a server that has a public static IP address, and (3) a Raspberry Pi behind a NAT. I connect from (1) to (3) via (2) as explained below.
On the ...
- 593
0
votes
1
answer
1k
views
pivoting without metasploit to get reverse shell
I have an exam next week. I need help.
This is my lab:
attacker machine (kali) : 192.168.1.81
1st hacked machine (Windows 10) : 10.10.10.130
target (Windows 7) : 10.10.10.135 (...
- 111
-1
votes
2
answers
1k
views
Is HTTPS over LAN effective?
From my understanding, while HTTPS does not stop a mitm, it makes it so the mitm cannot read the plaintext requests. But, the mitm could still tamper with the public/private keys anyways, so in came ...
- 82
0
votes
0
answers
128
views
Security practices with ngrok?
I know many developers use a tunnelling software called ngrok, yet many don't know how it works or what it's doing. An example of its use is in testing webhooks on a development server
I found this ...
- 1,214
2
votes
1
answer
90
views
Tunnel between two applications, one of them is a 3rd party app
I have written an application, that calls a 3rd party application with process.Start().
Inside the Arguments I pass needed credentials.
like so:
proc.StartInfo.Arguments = $"-c: -h: -x: -m:{...
- 23
2
votes
1
answer
530
views
Attack scenario when using split tunnel VPN
Background
As many others I am working from home and we use a VPN to access services from the company intranet (SMB fileshares, git repo, project management etc).
To improve things like video calls I ...
- 121
0
votes
2
answers
611
views
Is accessing Cockpit through SSH tunnel secure?
I can't find a definite answer on accessing cockpit from outside machines securely. Just allowing it through the firewall like that doesn't seem safe. It only uses basic user and password ...
3
votes
1
answer
4k
views
WireGuard / CVE-2019-14899: How secure the protocol really is?
I've been using OpenVPN and SSH tunnels for a multitude of scenarios over the years and recently I've been earning a lot of buzz around the simplicity and security of WireGuard. Now I've found some ...
- 217
0
votes
2
answers
1k
views
Managing SSH private keys on a public host
I have a web server which is running on a private subnet in AWS VPC, let us call it worker.
I can access the worker VM through a Bastion VM which is in the same VPC but in a public subnet.
Then, I ...
- 131
0
votes
1
answer
392
views
StrongSwan, IPsec remote certs and cert_policy
I'm looking for a way to limit the certs that my IPsec can accept. I'm using StrongSwan (swanctl version 5.7), I want to accept only certs coming from a remote with a name of yoji.*.example.com
I ...
- 1
0
votes
4
answers
181
views
Disable Encrypted Protocols Through Firewall
In my company, we have two internal domains with a firewall between them. When requesting firewall rules for an application with components on domain A and domain B, I was told that encrypted ...
1
vote
0
answers
268
views
Custom IPv6 network and security risks
I draw a custom network (I would use that for developing and testing, my ISP does not support IPv6), there IPv4 and IPv6 are present.
'A' device has firewall: incoming blocked, only accept access (SSH)...
3
votes
2
answers
1k
views
Automatically change connection of VPN when accessing certain websites
So I am quite new to VPNs, just downloaded and installed NORDVPN despite the latest admission of security breach for a trial period.
I am also running BitDefender TS on my computer.
I wanted to know ...
- 131
1
vote
2
answers
915
views
Is it possible to tunnel my whole linux machine through http proxy? [closed]
For some reason i access my internet through a HTTP proxy.
Is there a way to tunnel my whole Linux machine (currently am using ubuntu 18.04) through http proxy.
If i change proxy setting in the ...
- 113
2
votes
0
answers
183
views
Split tunneling to speed up Windows update
We have almost 10 years worth of Win7 updates that need to be done and the amount of bandwith can't be handled by our VPN. Are the security risks of enabling split-tunnel a lot smaller when its just ...
- 21
1
vote
1
answer
374
views
Why is GRE tunneling is needed when having a BGP based solution against DDoS?
I understand that GRE tunneling is very handy when sending the data back to the client after scrubbing because it's designed to ensure that the data is sent reliably by initiating a private point-to-...
user168683
2
votes
1
answer
4k
views
how to force openvpn client to use TLS instead of SSL connection [duplicate]
i'm trying to use openvpn client to connect TLS VPN server
here is my .ovpn file
client
tls-client
dev tun
proto tcp
remote example.com 443
resolv-retry infinite
auth-user-pass
persist-key
...
- 129
2
votes
1
answer
133
views
What's the difference between SSH tunneling and login into the same SSH server and executing commands?
Consider these 2 scenarios.
(1)
Let's say I login into an SSH server named A normally using
ssh [username] @ [IP address of A].
And now I connected to another server named B which is accepting ...
- 21
0
votes
1
answer
1k
views
What's the security concern of browsers using the HTTP CONNECT method?
The XMLHttpRequest spec says that attempted usage of the CONNECT method should throw a security error.
Is there a security issue with client-side JavaScript sending CONNECT requests to servers? It ...
- 229
0
votes
1
answer
461
views
Deanonimizing VPN/tor traffic [duplicate]
What a VPN does is take the encrypted traffic from the client, decrypt it and forward it to the server, while tor bounces the traffic in multiple nodes decrypting a layer at each node.
I have some ...
0
votes
1
answer
419
views
Problems with getting reverse shell
I got a badUsb, my current solution is: it downloads netcat.exe and establishes a netcat connection between test-box and me with the help of localxpose tunneling (when I'm not in the same network).
...
user187425
1
vote
1
answer
528
views
VPN vs SSH tunnelling for hotel wifi
I know it's recommended to use a VPN with a hotel WiFi but if I'm in a hurry and don't have time to setup my own VPN server would an SSH tunnel (invoked with ssh -D) work just as well to secure my web ...
- 13
24
votes
2
answers
5k
views
Is telnet secure through SSH tunneling
Firstly sorry, maybe dumb question, but I have one service running on my server which can be operated only by telnet (port 23), but I know that telnet is insecure, so I blocked port 23 in iptables ...
- 389
2
votes
1
answer
300
views
Is the same key used for Authorization and Encryption? (SSH Tunnel)
I am a bit confused on how SSH encryption works.
From reading this question, I see you can use a private key to authenticate with the -i flag.
I also know think that SSH encrypts data using ...
- 640
3
votes
1
answer
2k
views
Tunnel ssh over http with custom headers
I'm trying to set up corkscrew to make an SSH tunnel over HTTP, but I need to add custom headers after the "CONNECT" statement and before the ssh tunnel.
Does corkscrew support it? If yes, how can I ...
- 41
2
votes
1
answer
901
views
How to obfuscate SSH tunnel Mac?
I am looking to test a DPI (deep packet inspector). I currently have it set up to block SSH connections (which it does successfully).
I have learned that DPI can be bypassed by obfuscating/encrypting ...
- 640
0
votes
3
answers
3k
views
Are there any feasible ways to block the stunnel utility at the network level?
The stunnel utility written by Michał Trojnara allows, if I understand correctly, to "wrap" non-SSL protocols (such as ssh) in an SSL connection.
For example, imagine that all network ports on a ...
- 523
3
votes
0
answers
2k
views
Tunneling SSH over Shadowsocks
This post on unix.se explains how to tunnel SSH over shadowsocks.
This post on sec.se discusses some of the vulnerabilities of shadowsocks (namely its vulnerability to brute force).
After reading ...
- 7,517
2
votes
2
answers
713
views
tunnelling HTTP request through DMZ from a secured area
In my topology I have a secured area where all the servers are. There is also a DMZ with a few reverse proxy servers. I now need to make one of the servers in the secure area open to make HTTP calls ...
- 55
0
votes
1
answer
94
views
Negative consequences of forced encryption of unencrypted secvices
Are there any negative consequences to encrypting an unencrypted service/protocol like FTP, VNC, telnet, and so on by using forced encryption like ssh tunneling or OpenVPN tunnels?
- 1,139
-2
votes
1
answer
980
views
In DNS Tunneling, What's the DNS Response packet size?
In DNS Tunneling server use RR (CNAME, TXT, NULL) to send back data to the client. My question is what's the size of response packet and how much data can be sent using DNS response in DNS Tunnel ?
- 1
4
votes
1
answer
1k
views
Trying to tunnel a reverse shell out of an internal network
I am practicing performing a pentest and getting stuck trying to get an interactive reverse shell from an internal machine to my attacker machine.
This is what I have done so far:
Me(attacker): 67....
6
votes
1
answer
1k
views
Pivoting with Metasploit
I am trying to exploit a Windows VM on a different subnet behind a dual home Linux VM where I already have a shell. To keep it simple, I have a meterpreter reverse_tcp shell on the Linux VM (192.168....
- 313
-1
votes
2
answers
1k
views
VPN tunneling, routing and sniffing
I did not understand some things regarding the VPN.
How is the VPN tunnel established? My computer and the end VPN server need to exchange some info to establish a tunnel? (some kind of handshake or ...
- 113
6
votes
1
answer
1k
views
DNS Tunneling - Mitigation
I believe the root cause for DNS tunneling is because the internal hosts are allowed to do recursive queries of external domains. For DNS tunneling to work, an internal host should be able to send ...
- 61
4
votes
1
answer
2k
views
Is it sensible to tunnel TLS traffic over another TLS?
I'd like to secure my application's traffic using TLS with pre-distributed self-signed certificates (as a drop-in replacement of plain TCP).
In some cases, two clients won't be able to talk to each ...
- 143
1
vote
1
answer
285
views
VPN and SSH overseas
I stopped penetration testing and studying network security, for the most part, when the "NSA Playset" was released years ago. Thus, I have an IT question to impose upon you.
I will be traveling ...
- 111
4
votes
2
answers
1k
views
Can a Government block a specific app traffic, even with a VPN running?
A few minutes ago, there was a terror attack on a nightclub in Istanbul/Turkey(Thoughts and prayers to the victims and families), usually, the Government limits most of the communications apps traffic ...
- 41
0
votes
1
answer
400
views
How to ensure if an SSH tunnling failed (if I haven't really tunneled)
I tunneled data transition as 22-22 and 2222-80, between my PC and VPS:
ssh user@1.1.1.1 -L 22:localhost:22 -L 2222:localhost:80 -i ~/.ssh/key
To make sure both tunnels were created, I executed lsof ...
user123574