RE: Topology discover

["Steve McLaughlin" <Steve.McLaughlin () aggreko co uk>]

I would use nmap.
Find out your IP address (ifconfig) and then scan everything in your
subnet using OS detection. Obviously the gateway is your router.
Everything in your subnet should be in the same vlan.
Then nmap everything else on the internal class range to see what is up.
You can then use more detailed nmap scans once you know what is up and
where.
Nessus can also be run from the the command line to check for specific
vulnerabilities and un-patched boxes.

-----Original Message-----
From: Technica Forensis [mailto:forensis.technica () gmail com] 
Sent: 06 October 2005 19:38
To: Steve McLaughlin
Subject: Re: Topology discover

cheops is gui... If I need to map via a jump point that I only have a
cmd line to, how can I do that?

On 9/28/05, Steve McLaughlin <Steve.McLaughlin () aggreko co uk> wrote:
> Try cheops-ng
>
> http://cheops-ng.sourceforge.net/
>
> It's like a pen-testers network neighbourhood.
> Discovers, Draws the Maps, and Scans.
>
> Steve McLaughlin
>
> -----Original Message-----
> From: RSMC [mailto:smcsoc () yahoo es]
> Sent: 21 September 2005 21:57
> To: pen-test () securityfocus com
> Subject: Topology discover
>
>
> Hi there,
>
> I am currently performing a pen-test in the internal network of a
> company.
> I am used to pen-testing systems and the set of applications they
> support, looking for vulnerabilities in software version, logic or
> misconfiguration.
> I have also considered routing and protocol attacks as ARP spoofing
and
> RIP packet injection.
>
> But I think I am missing some techniques to find out what the topology
> is. I know about traceroute, firewalk and CDP, but I would like to
know
> if there is a whitepaper or documentation that explains how to find
out
> as much as possible about the enviroment I am in. Help about
discovering
> VLANs is also welcomed.
>
> Thanks in advance.
------------------------------------------------------------------------
> ------
> Audit your website security with Acunetix Web Vulnerability Scanner:
>
> Hackers are concentrating their efforts on attacking applications on
> your
> website. Up to 75% of cyber attacks are launched on shopping carts,
> forms,
> login pages, dynamic content etc. Firewalls, SSL and locked-down
servers
> are
> futile against web application hacking. Check your website for
> vulnerabilities
> to SQL injection, Cross site scripting and other web attacks before
> hackers do!
> Download Trial at:
>
> http://www.securityfocus.com/sponsor/pen-test_050831
------------------------------------------------------------------------
> -------
>
>
> ______________________________________________________________________
>
> This email has been scanned by the MessageLabs Email Security System.
> ______________________________________________________________________
>
> Visit us at http://www.aggreko.com
>
> Confidentiality Notice:  This communication and any accompanying
attachments
> contain confidential information intended for a specific individual
and
> purpose.  This communication is private and protected by law.  If you
are
> not the intended recipient, you are hereby respectfully notified that
any
> disclosures, copying, forwarding or distribution, or the taking of any
> action based on the contents of this communication is strictly
prohibited.
> _____________________________________________________________________
> This email has been scanned by the MessageLabs Email Security System.
> For more information please visit http://www.messagelabs.com/email
> ______________________________________________________________________
------------------------------------------------------------------------
------
> Audit your website security with Acunetix Web Vulnerability Scanner:
>
> Hackers are concentrating their efforts on attacking applications on
your
> website. Up to 75% of cyber attacks are launched on shopping carts,
forms,
> login pages, dynamic content etc. Firewalls, SSL and locked-down
servers are
> futile against web application hacking. Check your website for
> vulnerabilities
> to SQL injection, Cross site scripting and other web attacks before
hackers
> do!
> Download Trial at:
>
> http://www.securityfocus.com/sponsor/pen-test_050831
------------------------------------------------------------------------
-------
>

______________________________________________________________________

This email has been scanned by the MessageLabs Email Security System.
______________________________________________________________________

Visit us at http://www.aggreko.com

Confidentiality Notice:  This communication and any accompanying attachments contain confidential information intended 
for a specific individual and purpose.  This communication is private and protected by law.  If you are not the 
intended recipient, you are hereby respectfully notified that any disclosures, copying, forwarding or distribution, or 
the taking of any action based on the contents of this communication is strictly prohibited.

_____________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:

Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------