let's hack your home network // FREE CCNA // EP 9

About this video

He argues most home SOHO networks are hackable and structures the video around four weak areas: attack from the internet, devices inside the network, wireless, and the connection to an employer. He shows finding a public IP address, scanning it with pentest-tools and with Nmap from a cloud Linode server outside the network, including a TCP scan and a vuln script scan that he says found issues in his test network. He then gives router hardening steps: enable the firewall, remove port forwarding, disable remote management, change default credentials, update firmware, use WPA2 with a non-default SSID and strong password plus a guest network, and disable responding to WAN pings. For IoT risk he separates untrusted devices onto their own VLANs with client isolation, describing his trusted, IoT and least-trusted networks, and discusses options such as DD-WRT, Cisco gear and UniFi with IDS/IPS. Finally he explains remote-access versus site-to-site VPNs for work, and using a home VPN server for safe remote access to home services.

Key takeaways

• Scan your public IP from outside your network with Nmap to find open ports and vulnerabilities
• Close port forwards and disable remote management and WAN ping responses on the router
• Change default router credentials and keep router firmware updated
• Put IoT devices on separate VLANs with client isolation away from trusted devices
• Use WPA2, a non-default SSID and a strong password, with a separate guest network

Episode details: published December 6, 2020 · 30:16 long. Summary written by Self Growth Videos from the episode itself. Business results and any income figures mentioned are NetworkChuck’s own claims, shared for education — they are not typical or guaranteed.

← Previous: learn Python, Hacking, Linux, CCNA…..hurry!! (6 deals you don’t want to miss) · Next: 5G: what you DON’T know!! (3 things) →

All NetworkChuck videos · NetworkChuck profile · NetworkChuck on YouTube