Posts tagged with "networking"
-
Troubleshooting Firewall Issues Using Wireshark
In a previous post, the basics of Wireshark were covered, which focused on how to analyze network traffic. Another use case of Wireshark that I have found useful is to troubleshoot firewall issues affecting a client and server in a local or remote environment. For example, when attempting to access...
-
Using Wireshark to Analyze Network Traffic
Wireshark is a network analyzer that is used to analyze incoming and outgoing packets between source and destination hosts. This helps with getting a better understanding of the types of network traffic that appear on a specific network. This makes it a useful tool for both networking and security as...
-
An Introduction to Firewalls and Their Use in Cyber Defence
A firewall is a security control that uses rules to control inbound and outbound network traffic. A firewall can either be host-based or network-based. A host-based firewall is available as software on a system such as Windows Firewall and iptables on Linux. On the other hand, a network firewall is...
-
Enumerating Internal Network Processes Using net-enum-listeners
One of the areas to focus on after getting an initial foothold on a machine is enumerating ports that are only accessible internally. Each port has a corresponding process that uses it. Important processes to focus on are those that are running as SYSTEM or as a privileged user, which...
-
Reducing False Alarms in Snort Intrusion Detection System
When initially setting up Snort to run as an intrusion detection/prevention system, you are likely to find a large number of alerts due to activity on your network. The majority of generated alerts may be false positives. This will make it harder to find malicious traffic on your network which...
-
Setting up a Network between VMware Workstation Player and VirtualBox Virtual Machines
You may have faced a situation where you have virtual machines that have been set up in both VMware Workstation Player and VirtualBox (on the same computer) and would want them to communicate with one another. This would allow you, for example, to run Kali Linux (running on VMware) against...
-
Accessing Virtual Network Editor in VMware Workstation Player
Problem: you are running a virtual machine using VMware Workstation Player and want to change the network settings of the VMware network adaptors such as VMnet1 and VMnet8, but you are unable to find a way to do this. This can be done using the Virtual Network Editor (vmnetcfg.exe). However,...