RE: discovering network layout at layer2

From: Dave Killion (dkillion_at_charter.net)
Date: 02/13/04

  • Next message: wjnorth: "RE: OPST vs CEH" 
    To: "'Harry de Grote'" <harry@cc.kuleuven.ac.be>, <ald2003@users.sourceforge.net>, <pen-test@securityfocus.com>
Date: Thu, 12 Feb 2004 15:08:34 -0800

    Harry de Grote mentioned:

    > arp requests for the whole subnet? ;)

    The hacker's choice R U There (or just "THCRUT") facilitates this nicely.
    Give it an IP and subnet mask, and that sucker will spit out several
    thousand parallel threads for ARP requests. Scan a B in nothing flat.
    What's great is, not many systems detect ARP scans yet, so your IP-layer
    scan detectors generally miss this.

    -Dave

    ---------------------------------------------------------------------------
    Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

    Protect your network with the comprehensive security solution that
    integrates six applications for ease of use and lower TCO.

    Firewall - Virus protection - Spam protection - URL blocking - VPN
    - Wireless security.

    Download 30-day evaluation at:
    http://www.astaro.com/php/contact/securityfocus.php
    ----------------------------------------------------------------------------

  • Next message: wjnorth: "RE: OPST vs CEH"

    Relevant Pages

    • RE: WebDav Worm?
      ... I've seen the exact same pattern from 7 different source IPs in the ... All source IPs appear to be DSL or cable modem, ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
      (Incidents)
    • RE: Life After CISSP?
      ... Subject: Life After CISSP? ... The contents of this email and any attachments to it may contain ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
      (Security-Basics)
    • Re: pen testing & obfuscated shell code
      ... sleds) is that there are at least 2 ways of producing the same opcodes on Intel systems. ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
      (Pen-Test)
    • RE: Preventing OS Detection
      ... Once you've gotten your network packets tweaked so ... If I go to http://uptime.netcraft.com and enter my website, ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
      (Focus-Microsoft)
    • FW: OpenSSH anomaly
      ... Then attempt another ssh session, strace should give a complete (if ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
      (Incidents)