Questions tagged [tunneling]
tunneling refers to a mechanism in which one network protocol encapsulates a different payload protocol.
0
votes
0answers
28 views
I have access to router , now what? [on hold]
like the title said I get access to the router, I want to pivot to windows 10 machine and there is no port open? ii tried to use DNS to redirect to my site but the target can't download any file, I ...
2
votes
1answer
48 views
What's the difference between SSH tunneling and login into the same SSH server and executing commands?
Consider these 2 scenarios.
(1)
Let's say I login into an SSH server named A normally using
ssh [username] @ [IP address of A].
And now I connected to another server named B which is accepting ...
0
votes
1answer
129 views
What's the security concern of browsers using the HTTP CONNECT method?
The XMLHttpRequest spec says that attempted usage of the CONNECT method should throw a security error.
Is there a security issue with client-side JavaScript sending CONNECT requests to servers? It ...
0
votes
1answer
124 views
Deanonimizing VPN/tor traffic [duplicate]
What a VPN does is take the encrypted traffic from the client, decrypt it and forward it to the server, while tor bounces the traffic in multiple nodes decrypting a layer at each node.
I have some ...
0
votes
1answer
132 views
Problems with getting reverse shell
I got a badUsb, my current solution is: it downloads netcat.exe and establishes a netcat connection between test-box and me with the help of localxpose tunneling (when I'm not in the same network).
...
1
vote
1answer
214 views
VPN vs SSH tunnelling for hotel wifi
I know it's recommended to use a VPN with a hotel WiFi but if I'm in a hurry and don't have time to setup my own VPN server would an SSH tunnel (invoked with ssh -D) work just as well to secure my web ...
23
votes
2answers
4k views
Is telnet secure through SSH tunneling
Firstly sorry, maybe dumb question, but I have one service running on my server which can be operated only by telnet (port 23), but I know that telnet is insecure, so I blocked port 23 in iptables ...
2
votes
1answer
83 views
Is the same key used for Authorization and Encryption? (SSH Tunnel)
I am a bit confused on how SSH encryption works.
From reading this question, I see you can use a private key to authenticate with the -i flag.
I also know think that SSH encrypts data using ...
2
votes
1answer
741 views
Tunnel ssh over http with custom headers
I'm trying to set up corkscrew to make an SSH tunnel over HTTP, but I need to add custom headers after the "CONNECT" statement and before the ssh tunnel.
Does corkscrew support it? If yes, how can I ...
2
votes
1answer
309 views
How to obfuscate SSH tunnel Mac?
I am looking to test a DPI (deep packet inspector). I currently have it set up to block SSH connections (which it does successfully).
I have learned that DPI can be bypassed by obfuscating/encrypting ...
0
votes
3answers
766 views
Are there any feasible ways to block the stunnel utility at the network level?
The stunnel utility written by Michał Trojnara allows, if I understand correctly, to "wrap" non-SSL protocols (such as ssh) in an SSL connection.
For example, imagine that all network ports on a ...
2
votes
0answers
984 views
Tunneling SSH over Shadowsocks
This post on unix.se explains how to tunnel SSH over shadowsocks.
This post on sec.se discusses some of the vulnerabilities of shadowsocks (namely its vulnerability to brute force).
After reading ...
1
vote
1answer
323 views
tunnelling HTTP request through DMZ from a secured area
In my topology I have a secured area where all the servers are. There is also a DMZ with a few reverse proxy servers. I now need to make one of the servers in the secure area open to make HTTP calls ...
0
votes
1answer
53 views
Negative consequences of forced encryption of unencrypted secvices
Are there any negative consequences to encrypting an unencrypted service/protocol like FTP, VNC, telnet, and so on by using forced encryption like ssh tunneling or OpenVPN tunnels?
-2
votes
1answer
325 views
In DNS Tunneling, What's the DNS Response packet size?
In DNS Tunneling server use RR (CNAME, TXT, NULL) to send back data to the client. My question is what's the size of response packet and how much data can be sent using DNS response in DNS Tunnel ?
4
votes
1answer
509 views
Trying to tunnel a reverse shell out of an internal network
I am practicing performing a pentest and getting stuck trying to get an interactive reverse shell from an internal machine to my attacker machine.
This is what I have done so far:
Me(attacker): 67....
3
votes
1answer
518 views
Pivoting with Metasploit
I am trying to exploit a Windows VM on a different subnet behind a dual home Linux VM where I already have a shell. To keep it simple, I have a meterpreter reverse_tcp shell on the Linux VM (192.168....
-1
votes
2answers
1k views
VPN tunneling, routing and sniffing
I did not understand some things regarding the VPN.
How is the VPN tunnel established? My computer and the end VPN server need to exchange some info to establish a tunnel? (some kind of handshake or ...
5
votes
1answer
744 views
DNS Tunneling - Mitigation
I believe the root cause for DNS tunneling is because the internal hosts are allowed to do recursive queries of external domains. For DNS tunneling to work, an internal host should be able to send ...
4
votes
1answer
1k views
Is it sensible to tunnel TLS traffic over another TLS?
I'd like to secure my application's traffic using TLS with pre-distributed self-signed certificates (as a drop-in replacement of plain TCP).
In some cases, two clients won't be able to talk to each ...
1
vote
1answer
201 views
VPN and SSH overseas
I stopped penetration testing and studying network security, for the most part, when the "NSA Playset" was released years ago. Thus, I have an IT question to impose upon you.
I will be traveling ...
4
votes
2answers
544 views
Can a Government block a specific app traffic, even with a VPN running?
A few minutes ago, there was a terror attack on a nightclub in Istanbul/Turkey(Thoughts and prayers to the victims and families), usually, the Government limits most of the communications apps traffic ...
0
votes
1answer
337 views
How to ensure if an SSH tunnling failed (if I haven't really tunneled)
I tunneled data transition as 22-22 and 2222-80, between my PC and VPS:
ssh user@1.1.1.1 -L 22:localhost:22 -L 2222:localhost:80 -i ~/.ssh/key
To make sure both tunnels were created, I executed lsof ...
1
vote
1answer
68 views
How to make sure the data is indeed tunneled?
I am not of the IS field so sorry if anything I write here seems pathetic.
Background for this question:
I login to my server with the following command. The second -L porition is to encrypt data ...
1
vote
4answers
319 views
How could I tunnel all actions I do in my VPS from my browser (like PHPmyadmin actions)?
I am not of the field of information security so sorry if something I wrote below seems pathetic to you.
I am to defend my server's DB and for that I filtered port 3306 with CSF-LFD and now control ...
0
votes
2answers
253 views
Why can hackers get in network using tunneling? [closed]
I can't hack but I like to read about it. From my readings (securityfocus, exploit-db, owasp, etc...) it appears that hackers can actually get in a network using tunneling ; I'm not from a network ...
2
votes
1answer
1k views
Does a Server connecting to port 3544 pose an increased risk
I had look at the firewall logs and i can see my production server connects to microsoft (13.92.90.48) on UDP port 3544. A quick reading suggests this is to do with Teredo tunneling (IPV6 translation ...
3
votes
1answer
480 views
Does AH in tunneling mode provide encryption?
I've been reading on IP sec for a few days, and i have some confusion on the differences between AH and ESP in tunnel/transport mode. I understand that AH only provides authentication and integrity ...
3
votes
2answers
84 views
Security concerns with external MySQL access using tunnelling
I have gotten my personal vServer with a standard installation of Ubuntu Server 16.04 and I wanted to install and configure a MySQL server on it. I was considering to disable direct external access, ...
2
votes
2answers
454 views
Authentication helpers for tunneling through an HTTP proxy?
corkscrew is quite good for tunning SSH through an HTTP proxy. However, it only supports basic authentication. Have other people developed similar software supporting other types of authentications? ...
3
votes
1answer
153 views
Tunneling over a HTTP subfolder?
I have a firewall, which only forwards HTTP requests, and only if the request is pointing to something in a /admin/ folder, so it only lets through requests like this:
http://www.anysite.com/admin/...
0
votes
3answers
73 views
Webserver port tunneling security - security options
I'm developing system that allows access to client devices behind firewall, using port tunneling via SSH. Every client has dedicated linux based server, with port 80 being tunneled to public server. ...
1
vote
0answers
62 views
Tunnel after authentication is complete with EAP-TTLS or PEAP
After authentication is complete with EAP-TLS, EAP-TTLS or PEAP, what happens to the tunnel?
Is it collapsed?
1
vote
1answer
471 views
Detecting DNS tunneling
I have been trying to detect/establish DNS tunneling. First of all I logged out of my user account of the captive portal. Findings:
$ nslookup <somesite> // works fine
$ ping <somesite> //...
-1
votes
2answers
584 views
Are VPN tunnels really completely private? [duplicate]
I've been considering a VPN tunnel, specifically PIA.
These types of companies make bold claims of complete anonymity and privacy, with no one in the world (ISP's, governments, school or corporate ...
2
votes
0answers
2k views
Can SSH tunneling over DNS tunnel work in China to use free WiFi at airport?
I have followed a tutorial here: http://ebnj.net/sshoverdns/
This tutorial tells us how to carry all internet traffic via DNS tunnel if your airport enables no-limit outgoing DNS.
This guides us to ...
1
vote
2answers
872 views
SSH Tunnels for Securing IoT Sensor-to-Server Connections (Many to One)
All,
How bad (or good) an idea would it be to utilize SSH tunnels from my sensor gathering remote computers (imagine an "industrial" Raspberry Pi-like device w/ Linux) to my centralized server (also ...
2
votes
1answer
2k views
X windows security: VNC and X server vs xpra
I have a CentOS server that currently has no X server on it. It will be used for doing statistical crunching and providing other services (probably via a web interface). The main security for the ...
3
votes
4answers
3k views
How to know if accessing to a VPN service is safe and won't steal my data
I want to know if a VPN service is safe or not. If the VPN server itself can catch or sneak peek my data? Or as long as it is a VPN service, then the security is protected by the algorithm itself?
...
2
votes
1answer
574 views
Captive portal DNS tunneling
I recently had a meeting with a security researcher who told me about tunnelling over a captive portal using DNS.
I have done some research into this but I was wondering what is the simplest way to ...
1
vote
1answer
184 views
How would a SSL tunnel be exploited?
I am looking at our CI (Bamboo) Server initiating an outbound connection to setup a SSL tunnel to an agent running on an AWS ec2 instance. As per the documentation:
All traffic sent between the ...
0
votes
1answer
1k views
Transfer of packets in a VPN connection
I am trying to figure out how a computer communicates with a website when using a VPN connection (specifically, how packets are transferred) as compared to a computer that's not using a VPN connection....
1
vote
0answers
71 views
TLS in slow/unstable mobile/wireless networks [closed]
We have this rather old VPN tunnel software that is running in various wireless/mobile networks (from 2G mobile and upwards). It is currently running WTLS, as this software is from the old days when ...
-1
votes
1answer
169 views
when router get's ipsec packet does it look into crypto map acl
So I have a question about IPSec.
For example, we have an extended ACL with one line 10.10.10.0/24 10.20.20.0/24 on one side (R1)
and 10.20.20.0/24 10.10.10.0/24 on the other (R2).
When we see ...
12
votes
1answer
1k views
Does a VPN provide any security benefits over sshuttle or a vanilla ssh tunnel?
I use sshuttle to tunnel my traffic through one of my remote boxes whenever I'm in a cafe or connected to an insecure network.
Does a VPN provide any additional security benefit over this kind of ...
17
votes
6answers
10k views
How does a network admin block the reverse SSH in company?
Given firewall
inbound: all are blocked
outbound: allow port 80, 443
Problem
colleagues are still able to ssh to home device by port 80/443, and establish a reverse ssh tunnel from company to home, ...
5
votes
1answer
1k views
How should I tunnel arbitrary protocol traffic over HTTPS?
I'm posting this question from a moving train! (Ok, maybe that's not so impressive.) This train has an annoying WiFi - it's low-throughput, high-latency, tends to lose packets, and blocks most kinds ...
1
vote
1answer
488 views
What is the proper setup procedure for SSL Tunnel certificates?
I am a systems integrator using a system designed for bringing HVAC data up to a common interface; this system/software platform is called Niagara AX. The combination of the customer's network setup ...
2
votes
1answer
2k views
Using RSA for Web Application Authentication
I have a network that is only accessible through bastion servers over ssh. In it, I am developing web applications that are exposed to end users via GUI's served up over websockets. All traffic into ...
5
votes
3answers
891 views
Should traffic between two hosts in the same data center be encrypted?
We have two hosts, theoretically in the same data center. The two machines are hosted at Online.net. We're having a bit of a debate: should the traffic between the two hosts be encrypted.
The traffic ...
