Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Penetration Testing: Re: Discovering hosts behind NAT

Re: Discovering hosts behind NAT

From: Javier Fernandez-Sanguino Peņa <jfernandez_at_sgi.es>
Date: Wed, 23 May 2001 09:28:42 +0200

>
> There are two known network devices: a cisco, which seems totally silent, and a wellfleet router.
>

        Have you tried SNMP access? First try to check if the SNMP ports (udp) are open
(nmap -sU) and then do a dictionary attack against the router. A common
misconfiguration is to have SNMP open to the outside world and with well-known
communities.
        If so, you could probably get the information the router holds in its internal
tables and (maybe) configure it to allow you access to the "hidden" network.

        Javi
Received on May 24 2001

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos