Security Basics mailing list archives
Re: Re: Attacking a machine on network.
From: savagemp5 () yahoo com
Date: 30 May 2007 16:30:38 -0000
There are 1001 ways to attack... One simple way is MITM... making use of ARP. But it requires user intervention. When a compromised machine learns of a victim, u can firewall off everything on the victim, but not the broadcasted MAC address of the victim. (provided on the same broadcast subnet) By using this MAC info in arp -a, u could sit in between the victim and its gateway (or a website, or its proxy add), then try to arp spoof, while the user is browsing web or doing services over Netbios/SMB. U might just take over the session. Thats probably one way, requiring user. For servers it would be some other methods...
Current thread:
- Attacking a machine on network. John Pluffum (May 29)
- Re: Attacking a machine on network. Jason Ross (May 29)
- Re: Attacking a machine on network. Paul Sebastian Ziegler (May 30)
- Re: Attacking a machine on network. John Pluffum (May 30)
- RE: Attacking a machine on network. Mark Brunner (May 30)
- Re: Attacking a machine on network. Ryan Chow (May 30)
- RE: Attacking a machine on network. Murda Mcloud (May 30)
- Re: Attacking a machine on network. John Pluffum (May 30)
- Re: Attacking a machine on network. Alexander Klimov (May 30)
- <Possible follow-ups>
- Re: Re: Attacking a machine on network. sandeep . sandhu . in (May 30)
- Re: Re: Attacking a machine on network. savagemp5 (May 31)