TCP – Page 6 – WindowsTechs.com

When passing through SSL from web server A to web server B (via nginx), does web server A need SSL configured as well, or just web server B?

Posted on June 13, 2022 by rationaltiger24

I’m using nginx here as an example, but this is really more of a conceptual question about SSL termination and TCP that could apply to any web server.
Basically, if web server A receives TCP traffic on port 443 (the first nginx config) and… Continue reading When passing through SSL from web server A to web server B (via nginx), does web server A need SSL configured as well, or just web server B?→

Why is Microsoft using a TCP connection in a simple C program [closed]

Posted on May 29, 2022 by mimoun_elh

I’m learning C and I was creating a simple "Hello, World" program for learning. I was curious to see a VirusTotal analysis on the compiled program, but I was surprised when I discovered that the program was making a TCP connectio… Continue reading Why is Microsoft using a TCP connection in a simple C program [closed]→

TCP Reset attack: unable to break the TCP connection [closed]

Posted on May 16, 2022 by Huytyskland

I am trying to create a TCP Reset Attack on 3 docker containers: Attacker, Host01, Host02.
My goal is to attack the TCP connection between Host01 and Host02 and the end result would be the TCP connection breaks when executing the TCP reset… Continue reading TCP Reset attack: unable to break the TCP connection [closed]→

Leaving half open or full open connection having SYN cookie

Posted on May 9, 2022 by Hasnain Ali

Suppose an attacker collects a large number of initial sequence numbers sent by the server. Can the
attacker cause the server to create many fully open connections by sending ACKs with those initial
sequence numbers? Why?

Continue reading Leaving half open or full open connection having SYN cookie→

Creating half open or full open connection in presence of SYN cookie

Posted on May 9, 2022 by Hasnain Ali

Suppose an attacker knows that a target host uses SYN cookies. Can the attacker create half-open or fully open connections by simply sending an ACK packet to the target? Why or why not?

Continue reading Creating half open or full open connection in presence of SYN cookie→

Detect port forwarding

Posted on May 5, 2022 by Paula

If there are 3 machines A, B and C and A communicate directly with B (A -> B) but B is executing port fordwarding with the next command
socat TCP4-LISTEN:443,fork TCP4:<ip machine C>:443

So in fact the communication is A -> B … Continue reading Detect port forwarding→

Spoofing TCP/IP headers and uniqueness of the host name

Posted on May 2, 2022 by Szyszka947

I have some related questions:

Is it possible to spoof the source address in the TCP/IP header when using HTTPS?
If possible, is there any way to detect source address change? I think the checksum is not a good idea because if you can cha… Continue reading Spoofing TCP/IP headers and uniqueness of the host name→

SCP to create security groups in member AWS account

Posted on April 11, 2022 by RaJ

I’m trying to create a SCP to restrict member account users to create/modify security group(s) that have inbound rule for SSH/RDP with Source set as 0.0.0.0 or ::/0.
Basically, I want users to SSH into EC2 instances only using bastion host… Continue reading SCP to create security groups in member AWS account→

Repeated DUP ACK and RST to same TCP SEQ and ACK

Posted on April 4, 2022 by Homesec

I started noticing this behaviour for more than a month. Whenever I connect my laptop to the WiFi router there are lots of RST and DUP ACKs up to the same TCP sequence, as given in the example below, where DUP ACK reached the sequence numb… Continue reading Repeated DUP ACK and RST to same TCP SEQ and ACK→

The router (that my PC is connected to) is continuously attempting to connect through TCP80. What would be the reasons?

Posted on March 19, 2022 by LargeRat

I have no access to the router nor do I have any administrative access to this local network. But every 5 minutes the router attempts to connect to my PC through port 80/tcp, and it attempts exactly 4 times each time (and tries again 5 min… Continue reading The router (that my PC is connected to) is continuously attempting to connect through TCP80. What would be the reasons?→