RE: Sniffing on a switch

From: Smith, Michael J. (Michael.J.Smith_at_unisys.com)
Date: 10/29/05

  • Next message: ilaiy: "Re: Sniffing on a switch" 
    Date: Sat, 29 Oct 2005 10:27:19 -0500
To: "Andy Meyers" <andy.meyers@hushmail.com>, <pen-test@securityfocus.com>

    Sure. Check out dsniff, it does MAC-flooding on a switch (macof) and
    has some utilities to grab specific parts of network traffic, like IM,
    web, or username/password combinations.

    Michael J Smith michael.j.smith@unisys.com
    Information Security Architect
    703.419.3109 W
    703.855.0890 C

    > -----Original Message-----
    > From: Andy Meyers [mailto:andy.meyers@hushmail.com]
    > Sent: Thursday, October 27, 2005 10:55 PM
    > To: pen-test@securityfocus.com
    > Subject: Sniffing on a switch
    >
    > -----BEGIN PGP SIGNED MESSAGE-----
    > Hash: SHA1
    >
    > Now i know people say you "cant" sniff on a switch and I know about
    ARP
    > poisoning and MAC flooding. But there has to be another way. I have
    heard
    > too many stories about "he sniffed my AIM conversation on a Cisco
    switch"
    > (an example is in the most recent version of 2600). Does anyone know
    of
    > any
    > technique how to do this? Can you ARP poison a switch?
    >
    > Ashes
    > -----BEGIN PGP SIGNATURE-----
    > Note: This signature can be verified at
    https://www.hushtools.com/verify/
    > Version: Hush 2.4
    > Charset: UTF8
    >
    > wkYEARECAAYFAkNhkwYACgkQnZu7yPmLRpArTQCgp2JsbOSySZJ7XFvgy1sY4GcGntYA
    > oIwtV7CLTBjr5j2yW0v1In/Jm7Yv
    > =rigp
    > -----END PGP SIGNATURE-----
    >
    >
    >
    ------------------------------------------------------------------------ 

    --
> ----
> Audit your website security with Acunetix Web Vulnerability Scanner:
> 
> Hackers are concentrating their efforts on attacking applications on
your
> website. Up to 75% of cyber attacks are launched on shopping carts,
forms,
> login pages, dynamic content etc. Firewalls, SSL and locked-down
servers
> are
> futile against web application hacking. Check your website for
> vulnerabilities
> to SQL injection, Cross site scripting and other web attacks before
> hackers do!
> Download Trial at:
> 
> http://www.securityfocus.com/sponsor/pen-test_050831
>
------------------------------------------------------------------------
--
> -----
------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 
Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------
  • Next message: ilaiy: "Re: Sniffing on a switch"

    Relevant Pages

    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • Re: Sniffing on a switch
      ... Subject: AW: Sniffing on a switch ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Hackers are concentrating their efforts on attacking applications on your ... Up to 75% of cyber attacks are launched on shopping carts, forms, ...
      (Pen-Test)
    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • RE: Penetration test of 1 IP address
      ... Before I do anything very intrusive I personally go to the website ... Also remember once you have found a vulnerability, ... Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping ...
      (Pen-Test)
    • Re: Sniffing on a switch
      ... > Now i know people say you "cant" sniff on a switch and I know about ARP ... > Audit your website security with Acunetix Web Vulnerability Scanner: ... Up to 75% of cyber attacks are launched on shopping carts, forms, ... Cross site scripting and other web attacks before hackers ...
      (Pen-Test)