Penetration Testing mailing list archives

Re: [PEN-TEST] Modem detection without dialing


From: Eric <ews () TELLURIAN NET>
Date: Mon, 20 Nov 2000 18:35:47 -0800

nbtstat -a(A) against an NT machine with results of <06 Unique> will
identify a RAS service (that may be attached to a modem)

null connection and 'getmac \\host' with results of NDIS_WAN indicates a
potential modem

PCEverywhere ports 5631-2 will indicate a PCAnywhere box, but this doesn't
necessarily mean there is also a modem.

--eric

At 02:15 PM 11/20/2000 -0500, Blair, Glenn wrote:
I am wondered if there is a product which can detect the existence of a modem,
without
the need for the modem to be connected ?.  Specifically, in a LAN environment,
can an
administrator/pen tester identify a modem through the network, rather than
through the telephone
network.

Any thoughts would be appreciated.



Glenn Blair

Sr. Security Specialist
888 Birchmount Rd 6th Floor
tel. (416) 285-2498
fax (416) 288-5055
glenn.blair () scotiabank com


Current thread: