Find out the subnetting of a company

il.prof_at_virgilio.it
Date: 07/15/04

  • Next message: Chris Brenton: "Re: Why eEye Retina (was MBSA scanner)" 
    Date: Thu, 15 Jul 2004 10:17:02 +0200
To: pen-test@securityfocus.com

    During an internal black-box penetration test, from a subnet of a company
    (with or without DHCP), how do you find out the structure of the other subnets
    of network? In particular, how do you determine/discover the subnetting
    of the IP space of a company?

    An example:

    - IP network of the company XYZ: 10.0.0.0/8 (I use a private class to avoid
    the use of a real address space)
    - I?m in the subnet 10.0.0.0/24

    How do you find out the structure of other subnets that are part of the
    network 10.0.0.0/8?

    Il Prof.

  • Next message: Chris Brenton: "Re: Why eEye Retina (was MBSA scanner)"

    Relevant Pages

    • Re: W2K Laptop Networking Questions
      ... > addressese in each subnet for each nic. ... Static or they are DHCP and getting it by Reservations. ... Reservations mean nothing if the Client isn't using DHCP. ... >> ability to "hub" or network together. ...
      (microsoft.public.win2000.networking)
    • Re: Changing Corporate subnet address
      ... Maybe my thinking is flawed but I believe after changing the subnet I will ... VPN users must not be using the same IP network as the ... Well, the *lack* of DHCP may be a problem, as it would be much easier to ... no remote connectivity to them. ...
      (microsoft.public.windows.server.dns)
    • Re: Changing Corporate subnet address
      ... often use the same subnet as my private subnet which causes ... VPN users must not be using the same IP network as the ... Well, the *lack* of DHCP may be a problem, as it would be much easier to ... no remote connectivity to them. ...
      (microsoft.public.windows.server.dns)
    • Re: DHCP problem
      ... I agree with all your points but have inherited the network the way it is ... I've tried giving a NIC 2 IP addresses and then have it give out DHCP ... I think I'll try harder to convince everyone involved that a single subnet ... >> different subnets....ideally from a single DHCP server. ...
      (microsoft.public.windows.server.general)
    • Re: ICS questions and confusion
      ... >>>It doesn't HAVE to be on a different subnet, ... but that requires that the ICS host become a bridge. ... >> ICS is a software based NAT router, and routers work best when the ... >> network already had the required address 192.168.0.1" is confusing. ...
      (microsoft.public.windowsxp.network_web)