Re: [PEN-TEST] Spoofing switched networks

[Nathan Catlow <nsc () QSF DEMON CO UK>]

In my experience the only successful VLAN breaches I have seen have been
through insecure methods of VLAN membership (by IP or by MAC address) or by
getting onto the main backbone and 'joining' VLANS through insecure Gigabit or
ATM ports oh and of course people leaving 'default' management ports bound to
the wrong VLAN (usualy the first VLAN configured) which is always a good one.

I have never seen VLAN breaches by flooding of MAC addresses. This is more
likely to produce a VLAN to lose it's switching capability but not *all* VLANS
to start cross populating traffic.

But hey doesn't mean it's not possible.

regards,

Nathan.
--
nsc () qsf demon co uk |  All opinions   | IT Security Specialist
                    |  are my own     |

*I'd love to give my 0.02 worth - Have you got change for a dollar?*