Collaborate Disseminate
I have found out, that my Router firewall has never blocked ICMP traffic.
There is a lot of opinions online regarding ICMP, and whether it should be disabled or limited.
So far I have found out, that it can exploited to monitor network tra… Continue reading Router firewall ICMP risks and threats? [closed]
By Keith Jones, Anthony Kasza and Ben Reardon, Security Researchers, Corelight Introduction Recently, Trustwave reported on a new malware family which they discovered during a breach investigation. The backdoor, dubbed Pingback, executes on Windows sys… Continue reading Pingback: ICMP Tunneling Malware
I have a question for my security class with calculation the # of zombie system for ethernet types
Consider a distributed denial of service (DDOS) attack, Assume the
attacker has compromised a number of broadband connected computers to
us… Continue reading How to calculate the number of zombie systems [closed]
I have this configuration
|Subnet-1|<–>|GatewayA|<–>|Router|<–>|GatewayB|<–>|Subnet 2|
Following this study from inria,for a Uni project, I’m trying to implement a DOS attack on a Ipsec Gateway that, using the … Continue reading Ipsec fragmentation needed attack
CVE-2020-16898 is a remote code execution vulnerability caused by the improper handling of ICMPv6 Router Advertisement packets by Windows TCP/IP stack. Microsoft’s recommended workaround is to disable ICMPv6 RDNSS component.
My question is… Continue reading Is disabling IPv6 an effective workaround for "Bad Neighbor" Vulnerability (CVE-2020-16898)?
By Ben Reardon, Corelight Security Researcher This month’s Microsoft Patch Tuesday included a severe Remote Code Execution vulnerability in the way that Windows TCP/IP handles IPv6 “Router Advertisement” ICMP messages. Due to the severity and wide scop… Continue reading Community detection: CVE-2020-16898
No matching connection for ICMP error message: icmp src inside: X.X.X.98 dst outside: X.X.X.11 (type 3, code 2) on inside interface. Original IP payload: udp src X.X.X.11/53 dst X.X.X.98/52906.
Can somebody please help me understand the ca… Continue reading I am seeing ICMP type 3 error message from my firewall logs. However , I am unable to find the original request sent to that external IP [closed]
if a customer wants to monitor an IPSec-based site-to-site VPN and basically no incoming traffic is needed, would you recommend:
a) setting up a permanent tunnel that can be monitored all the time and blocking all incoming traffic
b) setti… Continue reading Security Best Practice – Monitoring a Site-to-Site VPN Tunnel
My switch is a TP-Link TL-SG105E perfectly function, but I can’t access to it because it’s like hidden somehow from the network.
I used tools like:
netdiscover -I wlp2s0 -r 192.168.0.0/24
nmap -PR 192.168.1.0/24
nmap -SP 192.168.1.0/24… Continue reading I can’t find my switch’s ip by both ARP and ICMP protocols scan with nmap [closed]
I’ve researched this and found the following on StackExchange and ServerFault, but they’re very old.
https://serverfault.com/questions/55889/why-block-outbound-icmp
Is it a bad idea for a firewall to block ICMP?
Security risk of PING?
… Continue reading What security benefit is there in 2020 to block outbound Ping