Сетевая безопасность и уязвимости

Уровень 0 · материалов: 4

В кластер входят документы об уязвимостях и методах защиты сетевых сервисов и протоколов, но не входят документы о техническом устройстве статической маршрутизации.

Общие признаки: уязвимости сетевых протоколов, несанкционированный доступ, риски конфигурации сети, защита сетевого трафика

Группа выше: Уязвимости сетевой инфраструктуры

Материалы

• #382 — Monitoring Routing Changes and EIGRP Vulnerabilities — Представитель этого кластера

  А ваша система мониторинга орёт, когда меняется маршрутизация? — gsandul

  Смысл: The main idea is that failing to secure dynamic routing protocols (like EIGRP) by leaving interfaces active can allow unauthorized users to manipulate network traffic and disrupt services through route hijacking.

  The author demonstrates how a simple ISP misconfiguration in EIGRP allowed them to hijack routing tables, steal traffic, and potentially lock out administrators, highlighting the need for routing change monitoring.

• #8502 — Practical Guide to IP Camera Stream Hijacking

  Взлом камер видеонаблюдения на практике — devlineman

  Смысл: The main idea is to demonstrate the technical vulnerability of IP cameras—specifically the ease of RTSP stream hijacking—to emphasize the critical importance of proper security configuration and network segmentation in surveillance systems.

  This technical article explains how to hijack and replace IP camera streams via RTSP and ONVIF and provides a comprehensive checklist to defend against such attacks.

• #31814 — Security Challenges of IPoE Implementation

  Проблема IPoE — ProotIK

  Смысл: The main idea is that while IPoE is popular due to its simplicity and lower infrastructure costs compared to PPPoE, it introduces severe security vulnerabilities, specifically the ease of unauthorized access (internet theft) and the loss of non-repudiation for legal purposes.

  The author warns that replacing PPPoE with IPoE for cost-saving reasons exposes ISPs to easy internet theft and security risks because it removes essential authentication layers.

• #4206 — Risks and Mitigation of Open RDP Ports

  Опасно ли держать открытым RDP в Интернете? — SlavikF

  Смысл: The main idea is that while opening RDP to the internet is risky and generally discouraged in favor of VPNs, it can be managed with specific security layers like brute-force protection tools, account renaming, and rigorous monitoring to prevent complete system compromise.

  Opening RDP ports to the internet exposes servers to constant brute-force attacks, requiring mitigation tools like IPBan and strict account hygiene to avoid ransomware and data breaches.