Penetration Testing mailing list archives

Re: [PEN-TEST] Modem detection without dialing


From: Ben Ford <bford () TALONTECH COM>
Date: Tue, 21 Nov 2000 14:28:16 -0800

Darryl Luff wrote:

"Blair, Glenn" wrote:

I am wondered if there is a product which can detect the existence of a modem,
without
the need for the modem to be connected ?.  Specifically, in a LAN environment,
can an
administrator/pen tester identify a modem through the network, rather than
through the telephone
network.

If you can query host configurations you can at least get hints. IIS can
detect machines with modem/RAS DRIVERS (as opposed to actual modems)
loaded, so you at least know to look at the machine. Unix would be a bit
harder I guess as every unix machine probably has a copy of pppd.

If the machine is actually routing traffic off the LAN you'd be able to
detect it as a router if you can sniff the network, but other LAN
machines would need to be forwarding traffic to it.

Linux would actually be easier, with client side scripting or remote access.

cat /proc/pci
cat /proc/interrupts
cat /proc/ioports
lspci

etc.


Current thread: