Collaborate Disseminate
I have a VoIP server on which several SIP clients are connected to through IPSec tunnels.
This is kind of an automated attendant so I both have RTP and SIP signalling flows.
I need to be able to store all RTP traffic on anot… Continue reading IPSec and traffic mirroring
For conducting arp-spoofing on Linux the following commands are used:
iptables -t nat -A PREROUTING -i eth1 -p tcp –dport 443 -s IP_1 -d IP_2 -j DNAT –to MY_IP
iptables -t nat -A POSTROUTING -o eth1 -p tcp –dport 443 -d … Continue reading MITM on Windows [on hold]
By default, mitmproxy will use its own local IP address for its server-side connections. What I want instead is mitmproxy to use the client’s IP address for server-side connections.
The following config is supplied to make this work:
I have been investigating a few instances recently where SIP UDP traffic has been somehow evading the ruleset defined in iptables leading me to suspect that there is a hole in our rules so i’m looking for advice on how to bol… Continue reading SIP UDP request breaking through iptables
I have 2 VPSs with Public IPs that one runs debian(eg IP:62.138.0.1) and the other Centos(eg IP:62.138.0.2).
In these servers i need to run a few services(web server, asterisk, mysql, …) that are accessible only to the VPN … Continue reading script to protect my VPS [on hold]
I use kali-rolling on a virutal machine and I try to set up a fake access point using airbase-ng, but my devices won’t connect to it whatsoever. My steps are:
I put my wirless adapter in monitor mode with airmon-ng and then … Continue reading Can’t connect to fake AP with airbase-ng
I am fairly new to network security, and I just learned about the Fail2Ban framework you can use for automated exploit detection/prevention. It says that you can protect yourself from DOS attacks by setting up a rule that wil… Continue reading Does blocking an IP with IP Tables protect you from a DOS (not DDOS) attack?
Background:
I understand that in order to ARP spoof a victim in a network using Scapy, we need to send ARP reply packets to the victim and the gateway router with the correct destination and Source IP address, but with the attacker’s sou… Continue reading ARP spoofing with Scapy. How does Scapy reroute traffic?
I’m trying to set up SO in my home network to lab and see if I can monitor all ingress/egress traffic from my SOHO router. I don’t have a switch with SPAN ports, or a network tap so I’m using OpenWRT in combination w/ iptable… Continue reading Security Onion VMWare + OpenWRT IPTables Mirroring
Watching requests log, I see some IPs, considered Black List.
For example:
91.224.217.74 – – [06/Dec/2017:11:12:54 +0000] “GET / HTTP/1.1” 200 10951 “-” “curl/7.17.1 (mips-unknown-linux-gnu) libcurl/7.17.1 OpenSSL/0.9.8i zl… Continue reading Debian automatic dnsbl