Penetration Testing mailing list archives

Re: remote MAC address discovery?


From: Stephen Friedl <steve () unixwiz net>
Date: Tue, 10 Dec 2002 10:01:32 -0800

Is there any way to discover the MAC address of a device if you're not
connected to the local subnet?

In general, no. But sometimes yes.

1) If they have open NETBIOS, this can be fetched as a result of a NETBIOS
   namserver query. See my nbtscan tool:

        http://www.unixwiz.net/tools/nbtscan.html

2) if they have open SNMP, this can often be queried from the interface.

3) if a *neighboring* machine has SNMP open, you can often query the ARP
   table to find it.

Steve

--- 
Stephen J Friedl | Software Consultant | Tustin, CA |   +1 714 544-6561
www.unixwiz.net  | I speak for me only |   KA8CMY   | steve () unixwiz net

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


Current thread: