|
Security Basics
mailing list archives
Re: Re: Attacking a machine on network.
From: savagemp5 () yahoo com
Date: 30 May 2007 16:30:38 -0000
There are 1001 ways to attack...
One simple way is MITM... making use of ARP. But it requires user intervention.
When a compromised machine learns of a victim, u can firewall off everything on the victim, but not the broadcasted MAC
address of the victim. (provided on the same broadcast subnet)
By using this MAC info in arp -a, u could sit in between the victim and its gateway (or a website, or its proxy add),
then try to arp spoof, while the user is browsing web or doing services over Netbios/SMB. U might just take over the
session.
Thats probably one way, requiring user. For servers it would be some other methods...
By Date
By Thread
Current thread:
- RE: Attacking a machine on network., (continued)
|