Penetration Testing mailing list archives

Re: Identify rogue adsl modems routers in the network


From: Peter Van Epp <vanepp () sfu ca>
Date: Mon, 26 May 2008 13:18:03 -0700

        A wardialer won't find an ADSL modem because it isn't a conventional
modem. The best bet would be as the poster noted asking the ISP because they
would have to provision the DSLAM in the CO for adsl and I think they are 
likely the only one that could tell for sure. You could physically examine
the jack on the corporate end (and that with no notice because simply 
disconnecting the modem for a while will leave you no further ahead). I'd 
assume (but don't know) that the corporation would be allowed to have that 
information as they are the "owner" of the circuit in question but you may hit 
issues about privacy but asking certainly won't hurt.
        Asking the telco about an (undoubtably for a fee :-)) restriction of 
no ADSL provisioning on corporate lines may be an option if as seems likely 
the requirement is complience. If there is a PBX in the way I don't beleive an 
ADSL modem will work so that may help eliminate this as a possibility (I 
beleive the line needs to be straight to the CO with no loading coils 
installed for ADSL to work). 

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada

On Mon, May 26, 2008 at 03:40:53PM -0400, kevin horvath wrote:
use a wardialer such as phonesweep.  Sweep the phone numbers that are
allocated to you and if you get a carier signal then you need to check
it out.  Good luck.

Kevin

On Mon, May 26, 2008 at 12:25 PM, t35tman <t35tman () gmail com> wrote:
Hi all,

Had a weired requirement recently.
I was wondering if there is any way to detect an adsl modem/router connected
to a phone line.

The scenario being able to trace the adsl modem/router internally from
within the corporate network or externally from the ISP network.

The only option I see is to check with the ISP ... any suggestions ?

Thanks and Regards



------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in Securing Web Applications  Find out now! Get
Webinar Recording and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------



------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes 
in Securing Web Applications  
Find out now! Get Webinar Recording and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes 
in Securing Web Applications  
Find out now! Get Webinar Recording and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------


Current thread: