Penetration Testing mailing list archives
RE: Mini Access Point
From: "Jeffrey" <jeffreyd () the-dominion net>
Date: Tue, 21 Oct 2003 12:21:04 -0400
Thank you for your Response. This is exactly what I intended to do. The reason for a mini device was to make it as inconspicuous as possible. The print is on a desk in plain view. I am going on the assumption that employees would recognize a standard SOHO appliance. I guess one thing I could do is to gut out one of these appliances and put it in my own casing. Thanks Jeff -----Original Message----- From: Volker Tanger [mailto:volker.tanger () discon de] Sent: Monday, October 20, 2003 12:07 PM To: pen-test () securityfocus com Subject: Re: Mini Access Point Greetings! On Sun, 19 Oct 2003 13:40:03 -0400 "Jeffrey" <jeffreyd () the-dominion net> wrote:
Just wondering if anyone is aware of a mini 802.11b access point that can be plugged inline with a network device such a printer. I am conducting a pen test and would like to use this device in my social engineering attack.
Why a "mini" version? The usual SOHO versions come with a 4port switch. Just choose one with an "uplink" port - and without external antennaes, if possible. For your attack choose an office where the network printer server is tucked away under a table - antennaes are simply too suspicious. Walk into the office with your repair-kit toolbox, announce you'll have to rewire the printer server ("please don't print in the next 5 minutes") due to network problems - and to install an additional hub/switch. Unplug the printer server appliance from the net and plug in the uplink port. Connect the printer server to one of the other ports. Check that printing works again ("Okay, all fixed - should work again. Can you print a test page, please?"). Was that the attack vector your customer askey you to perform on his network, or did I miss anything? Bye Volker Tanger ITK-Security --------------------------------------------------------------------------- FREE Whitepaper: Better Management for Network Security Looking for a better way to manage your IP security? Learn how Solsoft can help you: - Ensure robust IP security through policy-based management - Make firewall, VPN, and NAT rules interoperable across heterogeneous networks - Quickly respond to network events from a central console Download our FREE whitepaper at: http://www.securityfocus.com/sponsor/Solsoft_pen-test_031015 ---------------------------------------------------------------------------- --------------------------------------------------------------------------- FREE Whitepaper: Better Management for Network Security Looking for a better way to manage your IP security? Learn how Solsoft can help you: - Ensure robust IP security through policy-based management - Make firewall, VPN, and NAT rules interoperable across heterogeneous networks - Quickly respond to network events from a central console Download our FREE whitepaper at: http://www.securityfocus.com/sponsor/Solsoft_pen-test_031015 ----------------------------------------------------------------------------
Current thread:
- Mini Access Point Jeffrey (Oct 20)
- Re: Mini Access Point goat (Oct 20)
- Re: Mini Access Point Volker Tanger (Oct 20)
- Re: Mini Access Point Robert J. Brown (Oct 20)
- <Possible follow-ups>
- RE: Mini Access Point Jeffrey (Oct 21)
- RE: Mini Access Point Jeffrey (Oct 22)