Penetration Testing mailing list archives

Re: VLAN hopping - demonstration


From: "Ivan ." <ivanhec () gmail com>
Date: Wed, 18 Oct 2006 08:58:40 +1000

check these out

http://www.packetfactory.net/papers/VLAN-hopping/stake_wp.pdf
http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037252.html
http://www.sans.org/resources/idfaq/vlan.php

should get you started

cheers
Ivan

On 10/18/06, dubaisans dubai <dubaisans () gmail com> wrote:
How do you demonstrate VLAN hopping?. I am trying to show this to a
customer who has mutliple DMZ segments configured as Layer2 VLANs on a
Cisco 6500 switch.  There is NO trunk port on this switch but DTP is
turned on on all ports.

Is it enough to cascade another L2 switch on an access port [ say VLAN
100] of the 6509, connect a desktop on this second switch and send a
packet with different VLAN ID [say VLAN 200] on the 6509.

Am I on the right track?

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


Current thread: