Re: Wired captive portal pen-test

["Mario Spinthiras" <mspinthiras () gmail com>]

I am not sure what kind of captive portal it was. I know for sure that
if the administrator limited the dns traffic or performed DPI
(cleverly) they could avoid NSTX bypasses. NSTX relies on dns queries
solely to be able to bypass CP. However by limiting the amount of DNS
queries per IP to a more "normal" threshold then NSTX would be
rendered useless.

As for DTP , yersinia seems to be able to handle DTP auditing just
fine. I have not found other tools capable of doing similar audits.


-- 
Warm Regards,
Mario A. Spinthiras
Blog: http://www.spinthiras.net
Mail: mspinthiras () gmail com
Skype: smario125

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in 
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------