Skip to main content
7 votes

Can someone take money out of my account with just my Account & Routing number?

In theory they can, just like companies can directly take money (called Direct Debit here in the UK) from your account using those values. However to be able to do direct debits you'd need an ...
André Borie's user avatar
  • 12.8k
5 votes

What are the security implications of net.ipv4.conf.eth0.route_localnet=1 / route_localnet?

The documentation for this options shows the following: route_localnet - BOOLEAN Do not consider loopback addresses as martian source or destination while routing. This enables the use of 127/...
hspaans's user avatar
  • 356
5 votes

What is the risk of my VPN traffic routing through China?

In the case of VPNs, you shouldn't have to worry about whether or not it goes through China. What you should worry more about is the integrity and model of the VPN service you're using. If the ...
ChocolateOverflow's user avatar
4 votes

What are the security implications of net.ipv4.conf.eth0.route_localnet=1 / route_localnet?

One possible security implication of this settings is that, if a service listens on localhost as a security measure (i.e. it relies on 127.0.0.1 not being addressable by machines other than the one it'...
Rory McCune's user avatar
  • 62.4k
4 votes

Secure Routing without relying on Cryptography?

In general, no ad hoc network is actually secure unless it is encrypted because whatever method you would use to validate into it would be transmitted in a readable, and therefore, reproducible way. ...
Nosajimiki's user avatar
  • 1,857
3 votes

Do household IPv6 addresses introduce vulnerabilities?

Even though IPv6 addresses as such are globally routable, it does not necessarily mean that a system with one is exposed. In many cases (sadly not all), your consumer-grade router will employ stateful ...
multithr3at3d's user avatar
3 votes

General question on secure channels and implementations

The current practice assumes that general routing policies are sufficient. This is mostly for ease of use for Ops (content-based traffic shaping, automated intrusion detection, etc, work easier on ...
crovers's user avatar
  • 6,381
2 votes

OSCP (Offensive Security's PWK) Requirements

Absolute statements regarding OSCP You DO NOT require coder kind of skills. (Therefore, one is wasting his time learning hardcore programming for OSCP. Although It's always a plus if you have some ...
Youbecks003's user avatar
2 votes

What are the security implications of net.ipv4.conf.eth0.route_localnet=1 / route_localnet?

I think the main implication is, that firewall rules (distribution or custom) which allow communication for 127/8 might no longer be effective Iff they fail to specify the ingress interface. If rules ...
eckes's user avatar
  • 982
2 votes

Sending Probe Request Frames | Receving Probe Response -- Scapy

That's because you didn't include the "Dot11Elt" layer, try this: RadioTap()/Dot11(type=0,subtype=4,addr1="ff:ff:ff:ff:ff:ff", addr2="00:11:22:33:44:55",addr3="ff:ff:ff:ff:ff:ff")/Dot11Elt(ID="SSID", ...
MistSpark's user avatar
2 votes

will my ISP know my connection between systems in same network?

Your public IP is owned by your ISP, which means that the other IPs in your network are also owned by your ISP. Even if the other IPs are not owned by the same ISP, the packets still travel over your ...
schroeder's user avatar
  • 131k
2 votes
Accepted

CIS recommendations - disabling ip forwarding

Is there a bigger reason to do what the recommendation says, other than to make sure the default parameter is set? Similar to configuring firewall ACLs, the best practice is to explicitly configure ...
HashHazard's user avatar
  • 5,175
2 votes

What can I do to prevent BGP hijacking as an admin of some OVH's VPS?

While you cannot prevent BGP hijacking as a mere owner of an IP, you can improve your ability to detect it. There are various network monitoring services which monitor the routing behavior and compare ...
forest's user avatar
  • 66.9k
2 votes
Accepted

Man in the Middle how to read incoming traffic for victims on the network

In order to truly man in the middle them you'll need to arpspoof them. By arp poisoning the router and your target, you can make them both forward traffic to you instead of each other. Then you ...
DotNetRussell's user avatar
2 votes

Can we use network hub as an MITM sniffing device?

An alternative to purchasing a separate hub is to get a regular consumer router/switch combo and install OpenWRT (or any other firmware with mirroring type functionality). This will copy all traffic ...
Daisetsu's user avatar
  • 5,130
2 votes

Other computers/customers of my Internet Service Provider appears under my "Network" section in Windows Explorer

One obvious way this could happen is if your WiFi is not very secure, and a lot of neighbors are using it. That's probably not the case - this is a very large list of local devices for that, and ...
CBHacking's user avatar
  • 49.2k
2 votes
Accepted

How to prevent a web application from accessing local URLs (SSRF)

... prevent users from specifying internal URLs and only specifying servers accessible through the external internet? I doubt that this is securely possible to proactively filter user input for this. ...
Steffen Ullrich's user avatar
2 votes
Accepted

Should I be seeing network management protocols on 'user' subnets?

It depends on your network. If you have a large corporate network, you should limit the protocols to the subnets/vlans/ports where they are required. On the other side of the spectrum, on most home ...
Ljm Dullaart's user avatar
  • 2,125
1 vote

How to find a "secret" gateway

My suggestion is to ping that address and check the TTL value and with tcpdump verify the path that the ICMP packets takes, over tap0 or eth0 according your configuration, if you get the ICMP ...
camp0's user avatar
  • 2,267
1 vote

Why do I have a specific route for this strange IP?

I think I found what's happening everytime I change my VPN connection to another country, this specific IP changes. Of course, it's the open VPN app making an out connection to the server so the ...
Guerlando OCs's user avatar
1 vote

Do household IPv6 addresses introduce vulnerabilities?

The quoted comment is somewhat imprecise in its use of the expression "directly routable to the internet." What it should have said is "directly reachable from the internet." With IPv4, many routers ...
Tilman Schmidt's user avatar
1 vote

Web server responding to an HTTP request from a spoofed IP address

It is usually very hard to spoof TCP, which is the underlying protocol of HTTP (when ignoring QUIC, which has its own spoofing protection). But it is not impossible and it might be easier in some ...
Steffen Ullrich's user avatar
1 vote

Can someone take money out of my account with just my Account & Routing number?

Disclaimer: I an not a lawyer... Technically they can. More exactly, they can ask your bank to transfer money from your account to theirs, since they have enough information to uniquely identify both ...
Serge Ballesta's user avatar
1 vote

cross-over cable vs router for network with 2 computers?

The first thing to say is that it isn't a choice between a cross-over cable and a router. The initial choice is between a cross-over cable and a switch. Most home/soho routers will contain a switch, ...
Julian Knight's user avatar
1 vote

Sending multiple MAC addresses to the same port on a switch

If no security/restriction features are in place then the switch will store all the source MAC addresses it sees in it's switching table. That table will fill up and the switch will have to evict an ...
Peter Green's user avatar
  • 5,300
1 vote

Sending multiple MAC addresses to the same port on a switch

That depends on the firmware of the equipment. Since you asked, "What COULD happen," I'll enumerate (from the POV of an embedded software engineer) what I can think of. The switch may pass all ...
Douglas Daseeco's user avatar
1 vote

nmap reports a remote host as up, while it is down?

What do you have, network-wise, between you and your servers ? Any active element (router, firewall, etc.) can modify your trafic, hence: the fact that ping does not work can be unrelated to your ...
Patrick Mevzek's user avatar
1 vote
Accepted

What does this suspicious activity in my log suggest?

Yes, it is likely to be a bot scanning your network - probably looking for vulnerable versions of Asterisk running exposed to the Internet. You might want to implement fail2ban or something similar ...
Julian Knight's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible