Login

Recent searches

No recent searches

Search options

Only available when logged in.
mastodon.online is one of the many independent Mastodon servers you can use to participate in the fediverse.
A newer server operated by the Mastodon gGmbH non-profit

Administered by:

Server stats:

11K
active users

mastodon.online: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.4.0-nightly.2025-03-25

#netsec

7 posts6 participants1 post today
Public
Kamalavelan

#Homelab #update - I got #IPFire installed o my #RaspberryPi #router and suddenly all outgoing traffic is blocked. I am happy that I have literally add the devices to the green network to make things but now I am questioning what kind of firewall was already present in #OpenWRT where everything 'just worked'? Apparently #UPnP is such a big security hole. I am stuck without some services but am forced to learn #NetSec so liking it.

For ref - community.ipfire.org/t/miniupn

IPFire Community · Miniupnpd deprecatedHi, first, welcome to the IPFire community. 🙂 Indeed, both the miniupnpd add-on and the underlying libupnp are going to be removed in upcoming Core Update 158 (please refer to this and this commit for technical details). Since no testing version of this Core Update is available, yet, we did not announce this broadly, but certainly will. Our reasons to do so are twofold: UPnP is a security risk by design. Made to tell network perimeters to establish port forwardings and firewal...
Continued thread
Public
Who Let The Dogs Out 🐾

**Nihilist - Cisco IOS Security Inspector**

#network #cisco #security #audit #nihilist #python #hardening #netsec #defensive #network_security #blueteam #cisco_ios #netsec_tools

Nihilist is a security auditing tool designed for security engineers to assess the configuration of their own Cisco devices.

Before use, make sure that you have permission to analyze device configurations. Use of this tool must comply with local laws and not violate the policies of the organizations that own the devices being tested.

- Nihilist is not designed to hack into Cisco devices and does not contain vulnerability exploitation features;
- The tool works solely by reading the device configuration and does not make any changes. It does not require an account with maximum privileges (privilege level 15) to operate. It is sufficient to grant access only to execute show commands (read-only), which makes auditing as secure as possible;
- Nihilist uses SSH-only remote connectivity.

github.com/casterbyte/Nihilist

Cisco IOS Security Inspector. Contribute to casterbyte/Nihilist development by creating an account on GitHub.
GitHubGitHub - casterbyte/Nihilist: Cisco IOS Security InspectorCisco IOS Security Inspector. Contribute to casterbyte/Nihilist development by creating an account on GitHub.
Public *
Who Let The Dogs Out 🐾

**Nihilist - Cisco IOS Security Inspector**

#network #cisco #security #audit #nihilist #python #hardening #netsec #defensive #network_security #blueteam #cisco_ios #netsec_tools

Nihilist, (github.com/casterbyte/Nihilist) инструмент, предназначенный для аудита безопасности Cisco IOS. Функциональность данного инструмента позволяет оценить защищённость маршрутизаторов и коммутаторов Cisco. Nihilist работает путём подключения по SSH и анализа конфигурации с использованием регулярных выражений. Он проводит оценку защищенности IOS, канального и сетевого уровня инфраструктуры. В отличие от известного CCAT, Nihilist проводит более глубокий аудит конфигурации Cisco, анализируя не только факт включения механизмов защиты, но и их корректность и соответствие сетевой среде.

Подробное описание и информация по установке: github.com/casterbyte/Nihilist

Cisco IOS Security Inspector. Contribute to casterbyte/Nihilist development by creating an account on GitHub.
GitHubGitHub - casterbyte/Nihilist: Cisco IOS Security InspectorCisco IOS Security Inspector. Contribute to casterbyte/Nihilist development by creating an account on GitHub.
Public
HoldMyType

ICMP is an part of the IPv4 protocol, so it cannot officially be carried by other protocols. Although the IP protocol can be carried on a different protocol than the ethernet protocol.

#netsec
Many network security devices block all ICMP messages for perceived security benefits, including the errors that are necessary for the proper operation of PMTUD. This can result in connections that complete the TCP three-way handshake correctly but then hang when attempting to transfer data. This state is referred to as a black hole connection.[7]
stackoverflow.com/questions/19

Stack OverflowWhat data is included in ICMP (ping) request?I know the ICMP request contains the IP address. Is the client MAC address included in an ICMP request? What other info (if any) is included in a ping request?
Public *
Adrian Talpa :verifiedarmor:

I've been tinkering with microsegmentation lately and felt like I was constructing a digital fort.

Imagine partitioning your network into tiny, secure rooms so that if one gets breached, the invader can't roam freely, also technically called reducing the risk of lateral movement by the attackers.

It's like building your own castle floor by floor.

#netsec#cybersecurity#networking
ExploreLive feeds
About