Penetration Testing mailing list archives

Re: Ping a mac address


From: "Samuel R. Baskinger" <sbaskinger () lumeta com>
Date: Thu, 08 Dec 2005 16:26:01 -0500

Just did some nemesis-foolin' around and Linux with 2 interface will RARP the IP of the second interface but will not RARP a staticly added entry on the other interface.

I think a good start would be to write a script that sends rarps to each host on the larger network and asks it for each address on the smaller network.

As always, you may want to validate this behaviour on Windows etc.

Sam

Samuel R. Baskinger wrote:

What about arp poisoning? Inject arps saying that some IP on network A at some MAC and then rarp for that information on network B.

I have not experimented with this and am not sure how multihomed hosts would behave. Can someone clarify?

Sam

Brian Loe wrote:







------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------


Current thread: