Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos

Penetration Testing: Re: [PEN-TEST] Modem detection without dialing

Re: [PEN-TEST] Modem detection without dialing

From: Rietveld, Peter <priet_at_CENTENNIUM.NL>
Date: Tue, 21 Nov 2000 04:08:47 +0100

It should be possible to detect TAPI calls, so that at least you will have
the windows boxes covered. Network spy, or any other process spy tool should
do the trick. But if a modem is not connected, well, you will never see a
TAPI call, unless the modem is activated by accident or some phone home
software. If you can use a DMI tool, sou can actually see all the Plug &
Play hardware installed. But many companies are not too keen on DMI, some
consider it a security risc. And MS SMS can help you also. And many other
hardware inventory tools.

greetz, priet

----- Original Message -----
From: "Blair, Glenn" <glenn.blair_at_SCOTIABANK.COM>
To: <PEN-TEST_at_SECURITYFOCUS.COM>
Sent: Monday, November 20, 2000 8:15 PM
Subject: [PEN-TEST] Modem detection without dialing

> I am wondered if there is a product which can detect the existence of a
modem,
> without
> the need for the modem to be connected ?. Specifically, in a LAN
environment,
> can an
> administrator/pen tester identify a modem through the network, rather than
> through the telephone
> network.
>
> Any thoughts would be appreciated.
>
>
>
> Glenn Blair
>
> Sr. Security Specialist
> 888 Birchmount Rd 6th Floor
> tel. (416) 285-2498
> fax (416) 288-5055
> glenn.blair_at_scotiabank.com
>
Received on Nov 22 2000

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]