Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




basics logo Security Basics mailing list archives

Re: Re: Attacking a machine on network.
From: savagemp5 () yahoo com
Date: 30 May 2007 16:30:38 -0000

There are 1001 ways to attack...

One simple way is MITM... making use of ARP. But it requires user intervention.

When a compromised machine learns of a victim, u can firewall off everything on the victim, but not the broadcasted MAC 
address of the victim. (provided on the same broadcast subnet)

By using this MAC info in arp -a, u could sit in between the victim and its gateway (or a website, or its proxy add), 
then try to arp spoof, while the user is browsing web or doing services over Netbios/SMB. U might just take over the 
session. 

Thats probably one way, requiring user. For servers it would be some other methods...


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]