pen-test
[Top] [All Lists]

Re: Locating switches in a multi-layer switching environment

To: "Jon R. Kibler" <Jon.Kibler@aset.com>, <pen-test@securityfocus.com>
Subject: Re: Locating switches in a multi-layer switching environment
From: "Mathieu CHATEAU" <gollum123@free.fr>
Date: Sun, 18 Mar 2007 10:20:17 +0100
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
In-reply-to: <45FC99E7.2060908@aset.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <45FC99E7.2060908@aset.com>
Resent-date: Tue, 20 Mar 2007 07:19:10 -0700 (MST)
Resent-from: pen-test-return-1078483803@securityfocus.com
Resent-message-id: <20070320141910.155B3143E06@outgoing2.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
hello,

you might use open source tool to behave as a switch with your pc.
You can then try to access other vlan (trunking) or be in the spanning tree (which is the root one?)

Regards,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


----- Original Message ----- From: "Jon R. Kibler" <Jon.Kibler@aset.com>
To: <pen-test@securityfocus.com>
Sent: Sunday, March 18, 2007 2:46 AM
Subject: Locating switches in a multi-layer switching environment


Hi,

A network recon question: When pen testing an environment that deploys multi-layer switching, how can one reliably map the network and the relative location of all of the switches?

Add to this VLANS... How can you map VLANs that are on the network, especially if your access is but on one VLAN, and that VLAN is different than the switch management VLAN?

Thoughts, tools, tricks, white papers, etc. appreciated.

THANKS!
Jon Kibler
--
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC  USA
(843) 849-8214



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------




------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>