Skip to main content
OverflowAI is here! AI power for your Stack Overflow for Teams knowledge community. Learn more
42 votes

Is telnet secure through SSH tunneling

Yes. Controlling a Telnet client through an SSH tunnel is, in practice, as safe from eavesdropping as using any other program (e.g. a Bash shell) through the tunnel. Telnet is called an insecure ...
Arminius's user avatar
  • 44.8k
24 votes
Accepted

Is telnet secure through SSH tunneling

The traffic cannot be sniffed. It is not ideal - you're adding extra steps to arrive at a secure connection, so performance will suffer - but it is safe from sniffing at least at the network level. ...
Ben's user avatar
  • 2,064
9 votes
Accepted

SSH reverse tunnels: can the intermediate server eavesdrop on an SSH session?

Assuming that there is no active MITM attack going on (which can be detected by properly checking the host keys when connecting to rpi), the server sees only the SSH traffic between laptop and rpi. ...
Steffen Ullrich's user avatar
6 votes
Accepted

WireGuard / CVE-2019-14899: How secure the protocol really is?

Is this information technically correct? Yes, but please note that there is a modification of the previous attack which cannot be stopped by the previously recommended mitigations - see Blind In/On-...
Steffen Ullrich's user avatar
4 votes

X windows security: VNC and X server vs xpra

The "normal" way to use remote X11 is to have the X11 server run not on your server, but on the machine which is physically in front of the user. Then use ssh to do X11 forwarding, so that the ...
Tom Leek's user avatar
  • 173k
4 votes

Can a Government block a specific app traffic, even with a VPN running?

In theory one could use heuristics to guess the kind of traffic. A typical example is flow analysis where one analysis the size, direction and timing of transferred data because various protocols and ...
Steffen Ullrich's user avatar
4 votes
Accepted

Are there any feasible ways to block the stunnel utility at the network level?

Since you exclude SSL interception (i.e. no certs can be installed) and also exclude any kind of traffic pattern analysis there is not much left. What could be tried is analyzing the TLS handshake ...
Steffen Ullrich's user avatar
4 votes
Accepted

Is the same key used for Authorization and Encryption? (SSH Tunnel)

TL;DR: In SSH your private key is not used for encryption at all, it's only used to prove who you are. Each new connection to the server will establish a different encryption session key. Here are ...
Mike Ounsworth's user avatar
3 votes

Can a Government block a specific app traffic, even with a VPN running?

If the VPN connection is properly setup such that all data goes through it is not possible to block specific apps since there is no way to know what data is sent through the VPN connection. Without ...
Zeta Two's user avatar
  • 446
3 votes
Accepted

Is it sensible to tunnel TLS traffic over another TLS?

If I understand it correctly, this is a rough network diagram of your situation: You're saying A and B want to talk, but they can't directly so they use Relay. You are thinking of having A set up an ...
Luc's user avatar
  • 32.9k
3 votes

Does a Server connecting to port 3544 pose an increased risk

Recommendation at: https://www.stigviewer.com/stig/windows_7/2013-10-01/finding/V-17449 Is to block outbound IPv6 UDP 3544 for Windows Servers Reason: IPv6 transition technologies, which tunnel ...
coolguy7652's user avatar
3 votes
Accepted

Does AH in tunneling mode provide encryption?

AH mode doesn't provide encryption, it only makes the traffic it tamper-proof. It doesn't matter whether it's in transport or tunnel mode. If you need encryption then ESP is what you need. That ...
Zviratko's user avatar
3 votes

Security concerns with external MySQL access using tunnelling

Well, assuming you are using SSH to access the server anyway, that tunneling is effectively already in place. I would suggest doing a few things to prevent unauthorized access to your VPS: Give a non-...
Jason Huebel's user avatar
3 votes
Accepted

Detecting DNS tunneling

DNS does not use ICMP. It uses UDP (and rarely TCP) port 53. The firewall/router the captive portal contols either does not block that port or it is the DNS server and is responding. All other ...
billc.cn's user avatar
  • 3,936
3 votes

Are VPN tunnels really completely private?

These claims are ridiculous. There are plenty of threat models that aren't covered by VPN services like this: VPN server is compromised. Other network infrastructure within the VPN server's network ...
Polynomial's user avatar
  • 135k
3 votes
Accepted

What's the security concern of browsers using the HTTP CONNECT method?

The CONNECT method leaves the TCP connection at a different state than it originally was; unlike other HTTP request, the CONNECT method is stateful, it is always the last HTTP request that can happen ...
Lie Ryan's user avatar
  • 31.4k
3 votes

Can I use a VPN to access services only available to a specific network?

VPN, yes; Nord VPN no A VPN allows you to tunnel your traffic such that it will appear that you are physically on the destination network. If said library was hosting a vpn, your idea would work ...
CaffeineAddiction's user avatar
2 votes

Should I tunnel multiple TCP connections through a TLS/SSL tunnel or use TLS/SSL for each connection?

You should use multiple TLS connection. However, you should make sure that your application opens the multiple connection using TLS abbreviated handshake and session resumption possibly with session ...
Lie Ryan's user avatar
  • 31.4k
2 votes

Tunneling over a HTTP subfolder?

TL;DR That proxy does not allow for tunneling. And you have a firewall that parses the HTTP requests, likely to disallow HTTP tunneling altogether. You're pretty much limited to GET and POST. Since ...
grochmal's user avatar
  • 5,877
2 votes

Webserver port tunneling security - security options

I'm afraid that you have already failed at the first hurdle since you are using HTTP everywhere. This means that you are pushing unencrypted login traffic over the Internet which is subject to ...
Julian Knight's user avatar
2 votes
Accepted

Why can hackers get in network using tunneling?

Tunnelling to bypass firewall filtering means that an attacker uses a "trusted" protocol in order to exfiltrate data from the victim machine. For example, an attacker can inject exfiltrated data ...
nemux's user avatar
  • 111
2 votes

Trying to tunnel a reverse shell out of an internal network

I have solved my issue. TL;DR: TCP 53 was available to incoming/outgoing traffic When checking which protocols were allowed through the firewall, I was checking DNS by using 'host google.com' and '...
user0809452345's user avatar
2 votes
Accepted

VPN vs SSH tunnelling for hotel wifi

Yes, an SSH tunnel will provide the same confidentiality and integrity as an OpenVPN or IPSec VPN tunnel, assuming the configuration is secure. If you expect an active MITM attack, you will need to ...
forest's user avatar
  • 66.8k
2 votes

Attack scenario when using split tunnel VPN

Since in your specific setup the home office computers are either connected with a full VPN tunnel to the company or have full direct access to the internet (i.e. VPN off), the main point of the VPN ...
Steffen Ullrich's user avatar
2 votes

Is HTTPS over LAN effective?

Is HTTPS over LAN effective? Sure, it's used all the time. Less commonly within a private home's LAN, but certainly within companies, governments, data centers, warships... Heck, I've even seen it ...
CBHacking's user avatar
  • 48.9k
2 votes
Accepted

How to set up a restricted account for reverse SSH port forwarding in a safe way?

Your SSH settings are solid and well protected, with only one fatal flow: port forwarding. One attacker can start connections to your main server, but nothing stops him to forward to other ports ...
ThoriumBR's user avatar
  • 54.4k
2 votes
Accepted

Are all encrypted tunnels also considered virtual private networks (VPN)?

The concept of VPN revolves around giving the ability to access a network remotely, ultimately whether from other private or public networks. The definition is likely less firm than you imagine, and ...
multithr3at3d's user avatar
2 votes
Accepted

ProxyCommand implemented in which OpenSSH Version

If you're pentesting and you encounter an OpenSSH instance that old, surely there's an exploit you could engage that is significantly more powerful than ProxyCommand. That said, the history on Github ...
Adam Katz's user avatar
  • 11.7k

Only top scored, non community-wiki answers of a minimum length are eligible