Penetration Testing: Re: [PEN-TEST] Modem detection without dialing

From: Eric <ews_at_TELLURIAN.NET>
Date: Mon, 20 Nov 2000 18:35:47 -0800

nbtstat -a(A) against an NT machine with results of <06 Unique> will
identify a RAS service (that may be attached to a modem)

null connection and 'getmac \\host' with results of NDIS_WAN indicates a
potential modem

PCEverywhere ports 5631-2 will indicate a PCAnywhere box, but this doesn't
necessarily mean there is also a modem.

--eric

At 02:15 PM 11/20/2000 -0500, Blair, Glenn wrote:
>I am wondered if there is a product which can detect the existence of a modem,
>without
>the need for the modem to be connected ?. Specifically, in a LAN environment,
>can an
>administrator/pen tester identify a modem through the network, rather than
>through the telephone
>network.
>
>Any thoughts would be appreciated.
>
>
>
>Glenn Blair
>
>Sr. Security Specialist
>888 Birchmount Rd 6th Floor
>tel. (416) 285-2498
>fax (416) 288-5055
>glenn.blair_at_scotiabank.com
Received on Nov 22 2000