Questions tagged [tunneling]

tunneling refers to a mechanism in which one network protocol encapsulates a different payload protocol.

Filter by
Sorted by
Tagged with
3 votes
2 answers
556 views

securely tunneling through a MITM proxy

I am wondering if there is a practical way to establish a secure, encrypted network connection through an MITM proxy given the ability to communicate secrets out-of-band with a second, external proxy. ...
Aryeh Leib Taurog's user avatar
0 votes
0 answers
54 views

Why does IPsec use tunnel-mode for an external laptop? Could transport-mode be used? Why can't a gateway control access in transport-mode?

In an IPsec Secure gateway setup, why is tunnel-mode used when an external laptop wants to access an internal service protected by a firewall? Is tunnel-mode necessary or could transport-mode be used ...
Allexj's user avatar
  • 137
0 votes
0 answers
65 views

2 network tunnels from 2 providers to 1 machine running docker, will this expose all containers on both tunnels?

I have a server running multiple docker containers, accessible through tunneling. I want to create a new tunnel that is separate from the one I already have. Will the new tunnel service interfere or ...
Maize's user avatar
  • 1
1 vote
1 answer
211 views

PCI DSS 4.0 - Are SSH tunnels and gateways doomed?

I won't lie, I am not a security expert and I am likely one of them guys in them companies whom working life proficiency is to slowly become little annoying. I work for a company complying with PCI ...
round.robin's user avatar
0 votes
0 answers
105 views

PCI-DSS Compliance: SSL Tunneling Credit Card Information Through A HTTPS Mobile/Residential Proxy Service to A Destination Service

If a PCI compliant service decides to SSL-Tunnel credit card information via an independent residential/mobile proxy service to a destination payment service, would this protocol still be PCI ...
chukky arinze's user avatar
0 votes
0 answers
105 views

How to double hop pivot?

I have a networking routing problem which I am unable to find a solution for: I have a first machine, 192.168.51.103 (Windows), which is linked to subnet 172.16.51.0/24. To access this subnet, I first ...
Ankylo Gomez's user avatar
1 vote
1 answer
173 views

How outgoing tunnels are not stopped by AV or firewalls?

How can an attacker with initial access to a server behind a firewall, which only has SSH, HTTPS, and HTTP ports open, maintain remote access to the server even after the SSH port is closed by the ...
Akam's user avatar
  • 1,357
0 votes
1 answer
319 views

Security of SSH with Service like ngrok

I need some help understanding the security implications of using a service like ngrok to setup an ssh connection. I've got two computers without public IP addresses (both using mobile internet ...
mpr's user avatar
  • 3
0 votes
1 answer
261 views

Does the traffic tunnelled using Stunnel on port 443:TCP appear the same as normal HTTPS to DPI?

I wrapped my Socks5 traffic in TLS using Stunnel and the Stunnel server is listening on the port 443:tcp. I can connect successfully to Stunnel server and exchange Socks5 traffic. From the perspective ...
wiki's user avatar
  • 135
1 vote
1 answer
303 views

Security Implications of Allowing TCP Forwarding to Use vscode-server

While setting up a new VPS instance running Ubuntu, I found that I needed to set AllowTcpForwarding yes in /etc/ssh/sshd_config to achieve a remote VS Code connection. I am and will be the sole user ...
basse's user avatar
  • 111
0 votes
1 answer
793 views

SSH over HTTPS or Directly open Non Standard port

We have a situation where we have an architecture that calls for a Web based UI for querying some data and the data input is through rsync over SSH. I think it would be easier to manage and more ...
Osada Lakmal's user avatar
1 vote
2 answers
94 views

What is the better tunnel endpoint?

I'm trying to understand the consequences or implications of setting up tunneling endpoints for the below topology. The tunneling may be used for anything (encryption, VPNs, etc.) assuming the general ...
Watchdogs1499's user avatar
2 votes
2 answers
404 views

If a computer gets infected with malware, can the host firewall block the malware from communicating back to its controller on the internet?

I'm trying to figure out how secure a host firewall is, hence the question in the title. I read that many firewalls allow outbound connections to port 80 to allow browsing, would that be enough for ...
ninjarubberband's user avatar
0 votes
1 answer
168 views

ProxyCommand implemented in which OpenSSH Version

Scenario: You as a pentester are in a situation where you want to do multi hopping to jump over several ssh servers to your target. The systems are somehow outdated so you want to check what you can ...
secf00tprint's user avatar
0 votes
2 answers
116 views

Are all encrypted tunnels also considered virtual private networks (VPN)?

A few days ago, a colleague and myself were having a discussion specifically on site-to-site VPNs. My understanding, and how I was taught, are that all encrypted tunnels are virtual private networks ...
Peter Derouen's user avatar
2 votes
1 answer
128 views

Does opening an IPsec tunnel compromise the rest of my VPN?

Let's assume: I allow all of my VPN users to connect to various internal services (VPN's IP is allow listed) My VPN will be connected to a 3rd party network via IPSec Site-2-Site Tunnel. The purpose ...
user2530062's user avatar
2 votes
0 answers
877 views

Best way to avoid DPI/tunnel detection?

guys, I live in Russia and that pretty much says it all. I was using a standard self-hosted VPN on a DO droplet, but now I'm afraid that since VPN usage in Russia started to spread like a wildfire ...
passingTHROUGH1263's user avatar
3 votes
1 answer
682 views

How to set up a restricted account for reverse SSH port forwarding in a safe way?

I have a server (M: Main) that I trust very much (I have it home, locked, with an alarm, etc), to which I can SSH from the internet. I also have a number of "remote servers" and "IoT ...
Zorglub29's user avatar
  • 297
0 votes
1 answer
86 views

Force connetion through SSL Tunnel [closed]

All machines are Linux-based. I want to force ssh (or telnet) to the 192.168.100.20 server from the laptop through the SSL Tunnel. What command should I use?
user's user avatar
  • 1
0 votes
1 answer
131 views

Can I use a VPN to access services only available to a specific network? [closed]

I am a member of a library which has access to online databases that I use for work. The databases can only be accessed when you are on library's WIFI network. If I try to use the same databases from ...
Matthew's user avatar
1 vote
1 answer
2k views

Could someone the real IP address when using tunnel protocols like ngrok, localtunnel or serveo?

Could someone get the real IP address that is hidden behind the URL generated by tools like ngrok, localtunnel or serveo?
RickyLo's user avatar
  • 13
-1 votes
1 answer
134 views

How can you attack or redirect the client from the server over an RDP or SSH conneciton? [closed]

I have a penetration testing scenario where I am on the network with two machines, Machine A and Machine B. I have complete control over Machine B and am trying to leverage that to get access to ...
PenetrationTester's user avatar
1 vote
2 answers
1k views

SQL Server connections with TLS vs. through an encrypted tunnel?

I'm developing an application that will connect to Microsoft SQL Server in a local network: I'm considering whether these connections need to use TLS Or whether to leave it to the customer's ...
symbiont's user avatar
  • 111
5 votes
1 answer
808 views

SSH reverse tunnels: can the intermediate server eavesdrop on an SSH session?

Suppose there are three computers: (1) my laptop, (2) a server that has a public static IP address, and (3) a Raspberry Pi behind a NAT. I connect from (1) to (3) via (2) as explained below. On the ...
Flux's user avatar
  • 863
0 votes
1 answer
2k views

pivoting without metasploit to get reverse shell

I have an exam next week. I need help. This is my lab: attacker machine (kali) : 192.168.1.81 1st hacked machine (Windows 10) : 10.10.10.130 target (Windows 7) : 10.10.10.135 (...
Qassam Mahmoud's user avatar
-1 votes
2 answers
3k views

Is HTTPS over LAN effective?

From my understanding, while HTTPS does not stop a mitm, it makes it so the mitm cannot read the plaintext requests. But, the mitm could still tamper with the public/private keys anyways, so in came ...
Cipher Visor's user avatar
0 votes
0 answers
201 views

Security practices with ngrok?

I know many developers use a tunnelling software called ngrok, yet many don't know how it works or what it's doing. An example of its use is in testing webhooks on a development server I found this ...
stevec's user avatar
  • 1,270
2 votes
1 answer
125 views

Tunnel between two applications, one of them is a 3rd party app

I have written an application, that calls a 3rd party application with process.Start(). Inside the Arguments I pass needed credentials. like so: proc.StartInfo.Arguments = $"-c: -h: -x: -m:{...
calgara12's user avatar
2 votes
1 answer
1k views

Attack scenario when using split tunnel VPN

Background As many others I am working from home and we use a VPN to access services from the company intranet (SMB fileshares, git repo, project management etc). To improve things like video calls I ...
Stefan D.'s user avatar
  • 121
0 votes
3 answers
1k views

Is accessing Cockpit through SSH tunnel secure?

I can't find a definite answer on accessing cockpit from outside machines securely. Just allowing it through the firewall like that doesn't seem safe. It only uses basic user and password ...
Daniel Krajnik's user avatar
4 votes
1 answer
6k views

WireGuard / CVE-2019-14899: How secure the protocol really is?

I've been using OpenVPN and SSH tunnels for a multitude of scenarios over the years and recently I've been earning a lot of buzz around the simplicity and security of WireGuard. Now I've found some ...
TCB13's user avatar
  • 227
0 votes
2 answers
1k views

Managing SSH private keys on a public host

I have a web server which is running on a private subnet in AWS VPC, let us call it worker. I can access the worker VM through a Bastion VM which is in the same VPC but in a public subnet. Then, I ...
Kingindanord's user avatar
0 votes
1 answer
578 views

StrongSwan, IPsec remote certs and cert_policy

I'm looking for a way to limit the certs that my IPsec can accept. I'm using StrongSwan (swanctl version 5.7), I want to accept only certs coming from a remote with a name of yoji.*.example.com I ...
Sehnani's user avatar
0 votes
4 answers
247 views

Disable Encrypted Protocols Through Firewall

In my company, we have two internal domains with a firewall between them. When requesting firewall rules for an application with components on domain A and domain B, I was told that encrypted ...
user225444's user avatar
1 vote
0 answers
339 views

Custom IPv6 network and security risks

I draw a custom network (I would use that for developing and testing, my ISP does not support IPv6), there IPv4 and IPv6 are present. 'A' device has firewall: incoming blocked, only accept access (SSH)...
gergelymolnarpro's user avatar
3 votes
2 answers
2k views

Automatically change connection of VPN when accessing certain websites

So I am quite new to VPNs, just downloaded and installed NORDVPN despite the latest admission of security breach for a trial period. I am also running BitDefender TS on my computer. I wanted to know ...
Dhaval Shukla's user avatar
1 vote
2 answers
1k views

Is it possible to tunnel my whole linux machine through http proxy? [closed]

For some reason i access my internet through a HTTP proxy. Is there a way to tunnel my whole Linux machine (currently am using ubuntu 18.04) through http proxy. If i change proxy setting in the ...
xaander1's user avatar
  • 113
2 votes
0 answers
226 views

Split tunneling to speed up Windows update

We have almost 10 years worth of Win7 updates that need to be done and the amount of bandwith can't be handled by our VPN. Are the security risks of enabling split-tunnel a lot smaller when its just ...
Jason's user avatar
  • 21
2 votes
1 answer
807 views

Why is GRE tunneling is needed when having a BGP based solution against DDoS?

I understand that GRE tunneling is very handy when sending the data back to the client after scrubbing because it's designed to ensure that the data is sent reliably by initiating a private point-to-...
user avatar
2 votes
1 answer
7k views

how to force openvpn client to use TLS instead of SSL connection [duplicate]

i'm trying to use openvpn client to connect TLS VPN server here is my .ovpn file client tls-client dev tun proto tcp remote example.com 443 resolv-retry infinite auth-user-pass persist-key ...
ikel's user avatar
  • 129
2 votes
1 answer
345 views

What's the difference between SSH tunneling and login into the same SSH server and executing commands?

Consider these 2 scenarios. (1) Let's say I login into an SSH server named A normally using ssh [username] @ [IP address of A]. And now I connected to another server named B which is accepting ...
Maverick_284's user avatar
0 votes
1 answer
2k views

What's the security concern of browsers using the HTTP CONNECT method?

The XMLHttpRequest spec says that attempted usage of the CONNECT method should throw a security error. Is there a security issue with client-side JavaScript sending CONNECT requests to servers? It ...
Shruggie's user avatar
  • 249
0 votes
1 answer
639 views

Deanonimizing VPN/tor traffic [duplicate]

What a VPN does is take the encrypted traffic from the client, decrypt it and forward it to the server, while tor bounces the traffic in multiple nodes decrypting a layer at each node. I have some ...
Chi non salta Pavarotti è's user avatar
0 votes
1 answer
554 views

Problems with getting reverse shell

I got a badUsb, my current solution is: it downloads netcat.exe and establishes a netcat connection between test-box and me with the help of localxpose tunneling (when I'm not in the same network). ...
user avatar
1 vote
1 answer
614 views

VPN vs SSH tunnelling for hotel wifi

I know it's recommended to use a VPN with a hotel WiFi but if I'm in a hurry and don't have time to setup my own VPN server would an SSH tunnel (invoked with ssh -D) work just as well to secure my web ...
0xcoffee's user avatar
24 votes
2 answers
5k views

Is telnet secure through SSH tunneling

Firstly sorry, maybe dumb question, but I have one service running on my server which can be operated only by telnet (port 23), but I know that telnet is insecure, so I blocked port 23 in iptables ...
tomsk's user avatar
  • 389
2 votes
1 answer
408 views

Is the same key used for Authorization and Encryption? (SSH Tunnel)

I am a bit confused on how SSH encryption works. From reading this question, I see you can use a private key to authenticate with the -i flag. I also know think that SSH encrypts data using ...
user7886229's user avatar
3 votes
1 answer
3k views

Tunnel ssh over http with custom headers

I'm trying to set up corkscrew to make an SSH tunnel over HTTP, but I need to add custom headers after the "CONNECT" statement and before the ssh tunnel. Does corkscrew support it? If yes, how can I ...
CappyT's user avatar
  • 41
2 votes
1 answer
1k views

How to obfuscate SSH tunnel Mac?

I am looking to test a DPI (deep packet inspector). I currently have it set up to block SSH connections (which it does successfully). I have learned that DPI can be bypassed by obfuscating/encrypting ...
user7886229's user avatar
0 votes
3 answers
4k views

Are there any feasible ways to block the stunnel utility at the network level?

The stunnel utility written by Michał Trojnara allows, if I understand correctly, to "wrap" non-SSL protocols (such as ssh) in an SSL connection. For example, imagine that all network ports on a ...
Joseph's user avatar
  • 523