Re: Mapping a network

[Zack Payton <zpayton () gmail com>]

> Very nice idea.  counter: SNMP string just for the NMS, access list
> allowing just the NMS to use that string and uRPF enabled on all user
> subnets

Generally they won't have passive-interface enabled.  Hint: dynamips
-> route injection.
Bypass all ip filtering.

> Has that actually worked for you!?  counter: except or scp instead of
> snmp to get the configs

yep! see above.

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------