Penetration Testing mailing list archives
RE: Find out the subnetting of a company
From: "easternerd" <easternerd () gmx net>
Date: Tue, 20 Jul 2004 23:03:41 +0530
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi If you get a shell on the remote machine then you can probably use Psexec to do a ipconfig and find out the internal network range/subnet. There are many scenarios and methods in variance, It all depends on what sort of access method is being employed and which stage of the penetration you are in currently Email Correspondence : easternerd () gmx net easternerd () eml cc Website : http://www.cryptography.tk http://www.securityrisk.org - -----Original Message----- From: il.prof () virgilio it [mailto:il.prof () virgilio it] Sent: Thursday, July 15, 2004 1:47 PM To: pen-test () securityfocus com Subject: Find out the subnetting of a company During an internal black-box penetration test, from a subnet of a company (with or without DHCP), how do you find out the structure of the other subnets of network? In particular, how do you determine/discover the subnetting of the IP space of a company? An example: - - IP network of the company XYZ: 10.0.0.0/8 (I use a private class to avoid the use of a real address space) - - I?m in the subnet 10.0.0.0/24 How do you find out the structure of other subnets that are part of the network 10.0.0.0/8? Il Prof. -----BEGIN PGP SIGNATURE----- Version: PGP 8.0.3 iQEVAwUBQPweM+xhEq37a08BAQLr9wf9ESZxq44/mum/idoSh2VdNAOS+szszw8i 6RLNIsbUiPd9RCTIFmHjQ34wQEi9hX0aOHBvzyM+gaR8EGwQXCBSgT6zukcW3dzl I6oSRASeZTAsPYRQeOpUT+hNJl0I/6E4XQZSS4jgcR6OMDEo+50Zl6XuuqkuYxHb ynmHSxKWUI7yVbgqO/djG7JYYJBUOkxCODPWOcICLjNFEFDxGfrd7/9qKJv5crnf Kwp5h9R29ihI45TSAMX5VgJAJiekDhlGRESovKlO4YbEQAv9nEcP0XgeyEBJmCJX CkH3x3nGMppDI8oaSiZ5TNjE2+7MuiDBE8TuMYrnCS9pzaSNTz4SEQ== =dV1S -----END PGP SIGNATURE-----
Current thread:
- Find out the subnetting of a company il . prof (Jul 19)
- Re: Find out the subnetting of a company Miles Stevenson (Jul 20)
- Re: Find out the subnetting of a company J.A. Terranson (Jul 20)
- Re: Find out the subnetting of a company Miles Stevenson (Jul 20)
- Re: Find out the subnetting of a company Andy Cuff (Jul 21)
- Re: Find out the subnetting of a company J.A. Terranson (Jul 20)
- RE: Find out the subnetting of a company easternerd (Jul 21)
- Re: Find out the subnetting of a company Tim (Jul 21)
- <Possible follow-ups>
- RE: Find out the subnetting of a company Dieter Sarrazyn (Jul 20)
- Re: Find out the subnetting of a company Volker Tanger (Jul 21)
- RE: Find out the subnetting of a company Rob J Meijer (Jul 21)
- Re: Find out the subnetting of a company David M. Zendzian (Jul 21)
- Re: Find out the subnetting of a company Tony Carter (Jul 22)
- Re: Find out the subnetting of a company Martin Mačok (Jul 23)
- RE: Find out the subnetting of a company Jerry Shenk (Jul 28)
- Re: Find out the subnetting of a company David M. Zendzian (Jul 22)
- RE: Find out the subnetting of a company Liberty . Anthony (Jul 22)
- Re: Find out the subnetting of a company Miles Stevenson (Jul 20)