Penetration Testing mailing list archives
Re: [PEN-TEST] War Dialling
From: Michael Gough <MGough () FSCNET COM>
Date: Thu, 16 Nov 2000 10:57:48 -0700
I would warn you that the PBX list is not the real list you want. All companies have non PBX or DID lines - straight analog lines... All companies using a PBX have locations with needs for a non dial 9, prefix numbers so these are the ones you should concentrate on getting. Get the actual phone bills so you can validate the "actual" listing of numbers you really own. On our side I found twice as many modems on the analog lines as I found on the PBX lines. Also most PBX systems allow you to print the settings so you could just turn the ports off and see who complains and replace or secure the system that was connected to the port and update the PBX entries and your lists. Also make it a policy that all analog lines MUST go through the modem pool (if you have one) and the PBX 2nd choice and prohibit non-controlled analog lines. MG
gleibolt () ATT COM 11/16/00 09:37AM >>>
I've found that it is always best to go directly to the PBX switch administrators to get the range of numbers that are valid. You can then use ranges of a data file of valid numbers in tools like ToneLoc or THCscan. Greg -----Original Message----- From: Scott, Mick [mailto:Mick_scott () UK IBM COM] Sent: Thursday, November 16, 2000 7:00 AM To: PEN-TEST () SECURITYFOCUS COM Subject: [PEN-TEST] War Dialling Being a new member to this list I am not sure how much this topic has been aired. How ever I wonder if anyone has any ideas, or pointers on how they would eliminate irrelevant numbers on a war dialling exercise. If acme.com, a global company, has a very wide range of numbers how is it best to seek out the numbers that are relevant to the IT departments. Obviously there is the social engineering approach, however I am interested in any other ideas. Apologies if this has been discussed B4 Regards, Mick
Attachment:
TEXT.htm
Description:
Current thread:
- [PEN-TEST] War Dialling Scott, Mick (Nov 17)
- Re: [PEN-TEST] War Dialling mshines (Nov 17)
- Re: [PEN-TEST] War Dialling Lionel Ferette (Nov 17)
- Re: [PEN-TEST] War Dialling Steve (Nov 17)
- Re: [PEN-TEST] War Dialling Talisker (Nov 17)
- Re: [PEN-TEST] War Dialling Matthew Leeds (Nov 17)
- <Possible follow-ups>
- Re: [PEN-TEST] War Dialling Leibolt, Gregory, NBSO (Nov 17)
- Re: [PEN-TEST] War Dialling Michael Gough (Nov 17)
- Re: [PEN-TEST] War Dialling Meritt, Jim (Nov 20)