Penetration Testing: RE: discovering network layout at layer2

["Dave Killion" <dkillion () charter net>]

Harry de Grote mentioned:

> arp requests for the whole subnet? ;)
The hacker's choice R U There (or just "THCRUT") facilitates this nicely.
Give it an IP and subnet mask, and that sucker will spit out several
thousand parallel threads for ARP requests.  Scan a B in nothing flat.
What's great is, not many systems detect ARP scans yet, so your IP-layer
scan detectors generally miss this.

-Dave


---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
----------------------------------------------------------------------------