6
The company could use the laptop to scan everything on your network. What they can exploit depends entirely on what is exploitable.
To do this using best practice, you want to set up a separate network for the device. A lot of routers allow for a Guest network to be set up, and you could put your roommate on that.
You could put them on the ethernet and make ...
5
It looks like they add a rule to the firewall to deny outgoing connections. Since it is a stateful firewall, any new traffic is a new "connection". Existing traffic streams are unaffected since it is not a new "connection", but a part of the existing stream.
VPNs are a constant connection and traffic is tunnelled through that.
Example ...
3
There are two reasons you are unlikely to find an actual diagram with the info you want
It is the sort of thing that an attacker would love to have, making navigation through their target's network simple and stealthy
It will only be relevant to that organisation. You will need to tailor the architecture to your needs, not that of another company.
The ...
2
All what is needed are bugs in the network stack of the target. And network stacks can be a complex beast and thus bugs are not unlikely. See for example CVE-2016-1287 where "crafted UDP packets" could "allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system."
2
I don't know if the modem has itself bugs which might affect its security even when configured as a dumb DSL modem (i.e. bridge mode). But due to NAT the internal network should be save from direct attacks from this modem. Security issues in the modem might though result in traffic modification and can thus indirectly affect the internal network. But the ...
Only top voted, non community-wiki answers of a minimum length are eligible
