Penetration Testing mailing list archives

Re: Router Access


From: Steve Friedl <steve () unixwiz net>
Date: Wed, 1 Jun 2005 16:37:32 -0700

On Wed, Jun 01, 2005 at 06:52:43PM -0400, Sherwyn Williams wrote:
once someone gets access to a say linksys for instance apart from 
setting up remote access to the router, or getting the clients real 
ipaddress, what else can someone do. I am doing a pentest, and I want to 
show what are some of the ways that someone can use the router acess to 
the advantage.

Set up NAT pinholes to provide access to internal machines from the
outside (say, to NETBIOS).

Steve

-- 
Stephen J Friedl | Security Consultant |  UNIX Wizard  |   +1 714 544-6561
www.unixwiz.net  | Tustin, Calif. USA  | Microsoft MVP | steve () unixwiz net


Current thread: