Security Basics mailing list archives

Re: Re: Attacking a machine on network.


From: savagemp5 () yahoo com
Date: 30 May 2007 16:30:38 -0000

There are 1001 ways to attack...

One simple way is MITM... making use of ARP. But it requires user intervention.

When a compromised machine learns of a victim, u can firewall off everything on the victim, but not the broadcasted MAC 
address of the victim. (provided on the same broadcast subnet)

By using this MAC info in arp -a, u could sit in between the victim and its gateway (or a website, or its proxy add), 
then try to arp spoof, while the user is browsing web or doing services over Netbios/SMB. U might just take over the 
session. 

Thats probably one way, requiring user. For servers it would be some other methods...


Current thread: