Re: remote MAC address discovery?

From: Stephen Friedl (steve@unixwiz.net)
Date: 12/10/02

  • Next message: Martin Wasson: "Re: XSS Questions"
    Date: Tue, 10 Dec 2002 10:01:32 -0800
    From: Stephen Friedl <steve@unixwiz.net>
    To: pen-test@securityfocus.com, tbird@precision-guesswork.com
    
    

    > Is there any way to discover the MAC address of a device if you're not
    > connected to the local subnet?

    In general, no. But sometimes yes.

    1) If they have open NETBIOS, this can be fetched as a result of a NETBIOS
       namserver query. See my nbtscan tool:

            http://www.unixwiz.net/tools/nbtscan.html

    2) if they have open SNMP, this can often be queried from the interface.

    3) if a *neighboring* machine has SNMP open, you can often query the ARP
       table to find it.

    Steve

    ---
    Stephen J Friedl | Software Consultant | Tustin, CA | +1 714 544-6561
    www.unixwiz.net | I speak for me only | KA8CMY | steve@unixwiz.net

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/



    Relevant Pages

    • Re: ettercap help
      ... Anyways have never tried Ettercap for VNC. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
      (Pen-Test)
    • Re: Wardialing
      ... >>> achieving the connection with the modem. ... >>This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)
    • RE: How to Tackle the Legal Tangle?
      ... How to Tackle the Legal Tangle? ... >This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)
    • RE: CFM SQL injection
      ... You should better use union or alike get unauthorized data from the ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)
    • Re: ettercap help
      ... > I can get it to sniff telnet, ftp, pop, smb, but no vnc. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)