Penetration Testing mailing list archives

Re: Locating switches in a multi-layer switching environment


From: Santiago Barahona <sant-bar () dsv su se>
Date: Wed, 21 Mar 2007 08:04:38 +0100

if you have access to a port with CDP enabled you can re-negotiate to trunk mode...
check out Yersina

regards
Santiago


On 18 Mar 07, at 22:44, Ozan Ozkara wrote:

Hi,

There are many things about that. I thing that you could try to locate
port-socket based map from vendor's management software. Then, to create
supervisor VLAN on the core switch. Both this VLAN must be  responsible
for central management of the network and members of vlans IPs must be
routed to all vlan network. So you will able be surf on other VLANS.

regards
-ozan

On Sun, 2007-03-18 at 01:46 +0000, Jon R. Kibler wrote:
Hi,

A network recon question: When pen testing an environment that deploys multi-layer switching, how can one reliably map the network and the relative location of all of the switches?

Add to this VLANS... How can you map VLANs that are on the network, especially if your access is but on one VLAN, and that VLAN is different than the switch management VLAN?

Thoughts, tools, tricks, white papers, etc. appreciated.

THANKS!
Jon Kibler


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


Current thread: