Penetration Testing mailing list archives

Re: Small hardware network sniffer - does it exist?


From: "Scott Hazel" <opiesan () gmail com>
Date: Mon, 6 Nov 2006 09:49:11 -0500

I read something like this in the 2nd Stealing The Network book (How
to own a Continent). The hired guy breaks into a contractor's
apartment and does exactly what you're proposing (taped the box under
the desk). Given how the author's derive their material from real
world experience this might be a real product you could use. I don't
recall if it was a key logger or network sniffer so YMMV.  Good luck.
Sounds like the other suggestions are good ones to check out as well.


On 11/2/06, Petr.Kazil () eap nl <Petr.Kazil () eap nl> wrote:

I have ordered a few hardware keyloggers to play with
(http://www.keelog.com/) and I was wondering if the same idea exists for
networks?
A device that you could tape under a desk, and that would act as a
transparant bridge, sniffing all traffic.

I know that you can use arp-spoofing to get a similar result (easier,
better?), and I know about hardware network taps.
But I'm still interested in the theoretical possibilities of this idea.

I have a few old laptops, but these have just one PCMCIA network card, so
bridging is not possible (well, with the right kind of network cards you
can get two in that  slot - I'll see if you can still buy them). But
laptops are too big and heavy.

I've looked at microcontrollers with ethernet adapters, but here I find
webserver appliances with just one network interface. They're small but I'm
not sure if you could run an OS and a sniffer on them. I've looked at
miniboards but they are very expensive, too expensive for "just a toy".

But, considering that you can get a 2-cigarette-pack sized Pix-firewall,
such hardware must exist. But I haven't found the right keywords yet. Any
ideas?

Greetings, Petr Kazil


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


Current thread: