Penetration Testing mailing list archives

Re: [PEN-TEST] Modem detection without dialing


From: Darryl Luff <darryll () SNAKEGULLY NU>
Date: Tue, 21 Nov 2000 21:19:35 +1100

"Blair, Glenn" wrote:

I am wondered if there is a product which can detect the existence of a modem,
without
the need for the modem to be connected ?.  Specifically, in a LAN environment,
can an
administrator/pen tester identify a modem through the network, rather than
through the telephone
network.

If you can query host configurations you can at least get hints. IIS can
detect machines with modem/RAS DRIVERS (as opposed to actual modems)
loaded, so you at least know to look at the machine. Unix would be a bit
harder I guess as every unix machine probably has a copy of pppd.

If the machine is actually routing traffic off the LAN you'd be able to
detect it as a router if you can sniff the network, but other LAN
machines would need to be forwarding traffic to it.


Current thread: