Penetration Testing mailing list archives

Re: [PEN-TEST] Visio bites


From: Carric Dooley <carric () COM2USA COM>
Date: Thu, 14 Sep 2000 11:39:36 -0400

If there are undocumented features to make Visio more useful, the ass*oles
at MS would not tell us what they were.  They told us they would not support
us for doing any kind of modifying of the OS information (we had a 25K node
network, and the OS ID stuff was wrong as hell).

And one full discovery took over three days, so with a limitation on time,
it's just about can't be done.


----- Original Message -----
From: "Teicher, Mark" <mark.teicher () NETWORKICE COM>
To: <PEN-TEST () SECURITYFOCUS COM>
Sent: Wednesday, September 13, 2000 1:53 PM
Subject: Re: [PEN-TEST] Network Mapping (was Re: [PEN-TEST] How to "break
into" the Pen-Testing field)


Carric,

The numeric code in the database if properly identified by Visio Auto
Discovery is the sysOid. The AutoDiscovery engine is based on SNMP network
discovery, and other variants..

Actually if one plays with the scanning (there are internal parameters
that
aren't documented) parameters one can limit the scope of the scan for a
very large network, Basically you have run multiple discoverys to get a
complete picture




Current thread: