Information Security

Questions tagged [tunneling]

Ask Question

tunneling refers to a mechanism in which one network protocol encapsulates a different payload protocol.

108 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
0
votes
0answers
35 views

Security practices with ngrok?

I know many developers use a tunnelling software called ngrok, yet many don't know how it works or what it's doing. An example of its use is in testing webhooks on a development server I found this ...
2
votes
1answer
46 views

Tunnel between two applications, one of them is a 3rd party app

I have written an application, that calls a 3rd party application with process.Start(). Inside the Arguments I pass needed credentials. like so: proc.StartInfo.Arguments = $"-c: -h: -x: -m:{...
2
votes
1answer
117 views

Attack scenario when using split tunnel VPN

Background As many others I am working from home and we use a VPN to access services from the company intranet (SMB fileshares, git repo, project management etc). To improve things like video calls I ...
0
votes
0answers
58 views

How do I connect using ssh tunnel to heroku's cleardb mysql database from some gui tools like mysql workbench or beekeeper studio, when run on ubuntu

Im currently trying to connect to the Heroku's mysql cleardb database from beekeeper studio. My connection works when done normally. But when I use the ssh tunnel Im facing some issue. Their ...
0
votes
2answers
97 views

Is accessing Cockpit through SSH tunnel secure?

I can't find a definite answer on accessing cockpit from outside machines securely. Just allowing it through the firewall like that doesn't seem safe. It only uses basic user and password ...
2
votes
1answer
454 views

WireGuard / CVE-2019-14899: How secure the protocol really is?

I've been using OpenVPN and SSH tunnels for a multitude of scenarios over the years and recently I've been earning a lot of buzz around the simplicity and security of WireGuard. Now I've found some ...
0
votes
2answers
731 views

Managing SSH private keys on a public host

I have a web server which is running on a private subnet in AWS VPC, let us call it worker. I can access the worker VM through a Bastion VM which is in the same VPC but in a public subnet. Then, I ...
0
votes
1answer
158 views

StrongSwan, IPsec remote certs and cert_policy

I'm looking for a way to limit the certs that my IPsec can accept. I'm using StrongSwan (swanctl version 5.7), I want to accept only certs coming from a remote with a name of yoji.*.example.com I ...
0
votes
0answers
43 views

Unable to setup openvpn over ssh

I trying to setup SSH tunnel to mask my OpenVPN traffic from my android phone. Both SSH and OpenVPN are running on my rpi and I using openvpn client + SSHTunnel on android. What I can achieve is: - ...
0
votes
4answers
98 views

Disable Encrypted Protocols Through Firewall

In my company, we have two internal domains with a firewall between them. When requesting firewall rules for an application with components on domain A and domain B, I was told that encrypted ...
1
vote
0answers
169 views

Custom IPv6 network and security risks

I draw a custom network (I would use that for developing and testing, my ISP does not support IPv6), there IPv4 and IPv6 are present. 'A' device has firewall: incoming blocked, only accept access (SSH)...
2
votes
1answer
249 views

Automatically change connection of VPN when accessing certain websites

So I am quite new to VPNs, just downloaded and installed NORDVPN despite the latest admission of security breach for a trial period. I am also running BitDefender TS on my computer. I wanted to know ...
1
vote
2answers
604 views

Is it possible to tunnel my whole linux machine through http proxy? [closed]

For some reason i access my internet through a HTTP proxy. Is there a way to tunnel my whole Linux machine (currently am using ubuntu 18.04) through http proxy. If i change proxy setting in the ...
2
votes
0answers
121 views

Split tunneling to speed up Windows update

We have almost 10 years worth of Win7 updates that need to be done and the amount of bandwith can't be handled by our VPN. Are the security risks of enabling split-tunnel a lot smaller when its just ...
1
vote
1answer
205 views

Why is GRE tunneling is needed when having a BGP based solution against DDoS?

I understand that GRE tunneling is very handy when sending the data back to the client after scrubbing because it's designed to ensure that the data is sent reliably by initiating a private point-to-...
2
votes
1answer
2k views

how to force openvpn client to use TLS instead of SSL connection [duplicate]

i'm trying to use openvpn client to connect TLS VPN server here is my .ovpn file client tls-client dev tun proto tcp remote example.com 443 resolv-retry infinite auth-user-pass persist-key ...
2
votes
1answer
79 views

What's the difference between SSH tunneling and login into the same SSH server and executing commands?

Consider these 2 scenarios. (1) Let's say I login into an SSH server named A normally using ssh [username] @ [IP address of A]. And now I connected to another server named B which is accepting ...
0
votes
1answer
695 views

What's the security concern of browsers using the HTTP CONNECT method?

The XMLHttpRequest spec says that attempted usage of the CONNECT method should throw a security error. Is there a security issue with client-side JavaScript sending CONNECT requests to servers? It ...
0
votes
1answer
333 views

Deanonimizing VPN/tor traffic [duplicate]

What a VPN does is take the encrypted traffic from the client, decrypt it and forward it to the server, while tor bounces the traffic in multiple nodes decrypting a layer at each node. I have some ...
0
votes
1answer
320 views

Problems with getting reverse shell

I got a badUsb, my current solution is: it downloads netcat.exe and establishes a netcat connection between test-box and me with the help of localxpose tunneling (when I'm not in the same network). ...
1
vote
1answer
345 views

VPN vs SSH tunnelling for hotel wifi

I know it's recommended to use a VPN with a hotel WiFi but if I'm in a hurry and don't have time to setup my own VPN server would an SSH tunnel (invoked with ssh -D) work just as well to secure my web ...
23
votes
2answers
5k views

Is telnet secure through SSH tunneling

Firstly sorry, maybe dumb question, but I have one service running on my server which can be operated only by telnet (port 23), but I know that telnet is insecure, so I blocked port 23 in iptables ...
2
votes
1answer
152 views

Is the same key used for Authorization and Encryption? (SSH Tunnel)

I am a bit confused on how SSH encryption works. From reading this question, I see you can use a private key to authenticate with the -i flag. I also know think that SSH encrypts data using ...
3
votes
1answer
2k views

Tunnel ssh over http with custom headers

I'm trying to set up corkscrew to make an SSH tunnel over HTTP, but I need to add custom headers after the "CONNECT" statement and before the ssh tunnel. Does corkscrew support it? If yes, how can I ...
2
votes
1answer
693 views

How to obfuscate SSH tunnel Mac?

I am looking to test a DPI (deep packet inspector). I currently have it set up to block SSH connections (which it does successfully). I have learned that DPI can be bypassed by obfuscating/encrypting ...
0
votes
3answers
2k views

Are there any feasible ways to block the stunnel utility at the network level?

The stunnel utility written by Michał Trojnara allows, if I understand correctly, to "wrap" non-SSL protocols (such as ssh) in an SSL connection. For example, imagine that all network ports on a ...
2
votes
0answers
2k views

Tunneling SSH over Shadowsocks

This post on unix.se explains how to tunnel SSH over shadowsocks. This post on sec.se discusses some of the vulnerabilities of shadowsocks (namely its vulnerability to brute force). After reading ...
2
votes
2answers
502 views

tunnelling HTTP request through DMZ from a secured area

In my topology I have a secured area where all the servers are. There is also a DMZ with a few reverse proxy servers. I now need to make one of the servers in the secure area open to make HTTP calls ...
0
votes
1answer
54 views

Negative consequences of forced encryption of unencrypted secvices

Are there any negative consequences to encrypting an unencrypted service/protocol like FTP, VNC, telnet, and so on by using forced encryption like ssh tunneling or OpenVPN tunnels?
-2
votes
1answer
641 views

In DNS Tunneling, What's the DNS Response packet size?

In DNS Tunneling server use RR (CNAME, TXT, NULL) to send back data to the client. My question is what's the size of response packet and how much data can be sent using DNS response in DNS Tunnel ?
4
votes
1answer
999 views

Trying to tunnel a reverse shell out of an internal network

I am practicing performing a pentest and getting stuck trying to get an interactive reverse shell from an internal machine to my attacker machine. This is what I have done so far: Me(attacker): 67....
5
votes
1answer
948 views

Pivoting with Metasploit

I am trying to exploit a Windows VM on a different subnet behind a dual home Linux VM where I already have a shell. To keep it simple, I have a meterpreter reverse_tcp shell on the Linux VM (192.168....
-1
votes
2answers
1k views

VPN tunneling, routing and sniffing

I did not understand some things regarding the VPN. How is the VPN tunnel established? My computer and the end VPN server need to exchange some info to establish a tunnel? (some kind of handshake or ...
6
votes
1answer
1k views

DNS Tunneling - Mitigation

I believe the root cause for DNS tunneling is because the internal hosts are allowed to do recursive queries of external domains. For DNS tunneling to work, an internal host should be able to send ...
4
votes
1answer
1k views

Is it sensible to tunnel TLS traffic over another TLS?

I'd like to secure my application's traffic using TLS with pre-distributed self-signed certificates (as a drop-in replacement of plain TCP). In some cases, two clients won't be able to talk to each ...
1
vote
1answer
236 views

VPN and SSH overseas

I stopped penetration testing and studying network security, for the most part, when the "NSA Playset" was released years ago. Thus, I have an IT question to impose upon you. I will be traveling ...
4
votes
2answers
859 views

Can a Government block a specific app traffic, even with a VPN running?

A few minutes ago, there was a terror attack on a nightclub in Istanbul/Turkey(Thoughts and prayers to the victims and families), usually, the Government limits most of the communications apps traffic ...
0
votes
1answer
355 views

How to ensure if an SSH tunnling failed (if I haven't really tunneled)

I tunneled data transition as 22-22 and 2222-80, between my PC and VPS: ssh user@1.1.1.1 -L 22:localhost:22 -L 2222:localhost:80 -i ~/.ssh/key To make sure both tunnels were created, I executed lsof ...
1
vote
1answer
70 views

How to make sure the data is indeed tunneled?

I am not of the IS field so sorry if anything I write here seems pathetic. Background for this question: I login to my server with the following command. The second -L porition is to encrypt data ...
1
vote
4answers
387 views

How could I tunnel all actions I do in my VPS from my browser (like PHPmyadmin actions)?

I am not of the field of information security so sorry if something I wrote below seems pathetic to you. I am to defend my server's DB and for that I filtered port 3306 with CSF-LFD and now control ...
0
votes
2answers
378 views

Why can hackers get in network using tunneling? [closed]

I can't hack but I like to read about it. From my readings (securityfocus, exploit-db, owasp, etc...) it appears that hackers can actually get in a network using tunneling ; I'm not from a network ...
3
votes
1answer
3k views

Does a Server connecting to port 3544 pose an increased risk

I had look at the firewall logs and i can see my production server connects to microsoft (13.92.90.48) on UDP port 3544. A quick reading suggests this is to do with Teredo tunneling (IPV6 translation ...
2
votes
1answer
788 views

Does AH in tunneling mode provide encryption?

I've been reading on IP sec for a few days, and i have some confusion on the differences between AH and ESP in tunnel/transport mode. I understand that AH only provides authentication and integrity ...
3
votes
2answers
111 views

Security concerns with external MySQL access using tunnelling

I have gotten my personal vServer with a standard installation of Ubuntu Server 16.04 and I wanted to install and configure a MySQL server on it. I was considering to disable direct external access, ...
2
votes
2answers
520 views

Authentication helpers for tunneling through an HTTP proxy?

corkscrew is quite good for tunning SSH through an HTTP proxy. However, it only supports basic authentication. Have other people developed similar software supporting other types of authentications? ...
2
votes
1answer
208 views

Tunneling over a HTTP subfolder?

I have a firewall, which only forwards HTTP requests, and only if the request is pointing to something in a /admin/ folder, so it only lets through requests like this: http://www.anysite.com/admin/...
0
votes
3answers
81 views

Webserver port tunneling security - security options

I'm developing system that allows access to client devices behind firewall, using port tunneling via SSH. Every client has dedicated linux based server, with port 80 being tunneled to public server. ...
1
vote
0answers
79 views

Tunnel after authentication is complete with EAP-TTLS or PEAP

After authentication is complete with EAP-TLS, EAP-TTLS or PEAP, what happens to the tunnel? Is it collapsed?
0
votes
3answers
1k views

rdp connection with netcat pivoting [closed]

I want to connection from local computer to another local computer. I have 3 machine. for example A: 192.168.1.50 -> in local windows machine B: 50.3.52.110 -> linux server C: 192.168.5.25 -&...
1
vote
1answer
542 views

Detecting DNS tunneling

I have been trying to detect/establish DNS tunneling. First of all I logged out of my user account of the captive portal. Findings: $ nslookup <somesite> // works fine $ ping <somesite> //...

1
2 3