Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: Mapping Class A network ( any easy trick?)

from [alank] Network Security [Permanent Link]
Subject: Re: Mapping Class A network ( any easy trick?)
Date: Tue, 8 Feb 2005 12:01:25 -0800 (PST) 
If you are local to the network, start by seeing if any routing protocols
are running that you can sniff.

That will get you started.

If no routing protocols, then try divide and conquer.

Traceroute the /16  or /8 subnets of the class A and try to map out what
the network is setup as. That will give better hints as to what is in
use/not in use.

Query the SOA for the DNS servers, this will may give you hints on what
subnets are used for servers, possibly in other regions.

If DNS servers are not locked down, you can axfr the zone and go analyze
the ip address contained.

Look for hints to other DNS zones in different regions to harvest.

Alan




I am about to do a penetration testing on a ?Class A
network? and wondering how I can map the network
without pinging 17 million IPs.(nmap -Sp 10.0.0.0/8)

I did some research and the best information I got is
from one of the earlier post on this
list(http://seclists.org/lists/pen-test/2004/Jul/0067.html)
. It was to use broadcast IPs for pings. But it may miss some subnets.

Is that the best way to it? If not, please advise
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  RE: Mapping Class A network ( any easy trick?), Moonen, Ralph
Next by Date:  RE: FW: Mapping Class A network ( any easy trick?), Navin Johnson
Previous by Thread:  Mapping Class A network ( any easy trick?), John Thomas
Next by Thread:  Re: Mapping Class A network ( any easy trick?), alank
Indexes:  [Date] [Thread] [Top] [All Lists]