Re: [PEN-TEST] Modem detection without dialing

[Steve <steve () SECURESOLUTIONS ORG>]

For Microsoft products you could simply use Systems Management Server (SMS)
to do a hardware inventory of workstations.  Granted this will miss a few,
but you could also have it search workstation hard drives for specific
driver files and dll files.


> If you can query host configurations you can at least get hints. IIS can
> detect machines with modem/RAS DRIVERS (as opposed to actual modems)
> loaded, so you at least know to look at the machine. Unix would be a bit
> harder I guess as every unix machine probably has a copy of pppd.
>
> If the machine is actually routing traffic off the LAN you'd be able to
> detect it as a router if you can sniff the network, but other LAN
> machines would need to be forwarding traffic to it.