Re: [PEN-TEST] Modem detection without dialing

["Rietveld, Peter" <priet () CENTENNIUM NL>]

It should be possible to detect TAPI calls, so that at least you will have
the windows boxes covered. Network spy, or any other process spy tool should
do the trick. But if a modem is not connected, well, you will never see a
TAPI call, unless the modem is activated by accident or some phone home
software. If you can use a DMI tool, sou can actually see all the Plug &
Play hardware installed. But many companies are not too keen on DMI, some
consider it a security risc. And MS SMS can help you also. And many other
hardware inventory tools.

greetz, priet


----- Original Message -----
From: "Blair, Glenn" <glenn.blair () SCOTIABANK COM>
To: <PEN-TEST () SECURITYFOCUS COM>
Sent: Monday, November 20, 2000 8:15 PM
Subject: [PEN-TEST] Modem detection without dialing


> I am wondered if there is a product which can detect the existence of a
modem,
> without
> the need for the modem to be connected ?.  Specifically, in a LAN
environment,
> can an
> administrator/pen tester identify a modem through the network, rather than
> through the telephone
> network.
>
> Any thoughts would be appreciated.
>
>
>
> Glenn Blair
>
> Sr. Security Specialist
> 888 Birchmount Rd 6th Floor
> tel. (416) 285-2498
> fax (416) 288-5055
> glenn.blair () scotiabank com