Location: TechWiseTV Discussion Forum

Discussion: Layer 3/4 Pen testsReported This is a featured thread

Showing 5 posts

dbaker85749
Layer 3/4 Pen tests
Oct 8 2008, 12:39 PM EDT | Post edited: Oct 8 2008, 12:39 PM EDT
I have been performing Val test fro over a year on my servers, but I need to take the efforts to the next level. I would like to know how to pperfomr router/switches and other layer 3/4 pen test. Pen test for e-commerce servers are pretty straight forward, but the routers and switch layer are a bit different. Could you give me some direction? Do you find this valuable?    
Keyword tags: Pen tests
JimmyRay10acn
JimmyRay10acn
1. RE: Layer 3/4 Pen tests
Oct 9 2008, 4:47 PM EDT | Post edited: Oct 9 2008, 4:47 PM EDT
I would look at some of the hacking exposed series to get a handle on this. Hacking networking gear is a little more difficult then application layer stuff, because it is not as forgiving. 1  out of 2 found this valuable. Do you?    

rtaccon
2. RE: Layer 3/4 Pen tests
Dec 24 2008, 10:59 AM EST | Post edited: Dec 24 2008, 10:59 AM EST
Give a try to this excellent book:

http://www.amazon.com/Hacking-Exposed-Networks-Andrew-Vladimirov/dp/0072259175
1  out of 1 found this valuable. Do you?    
JimmyRay10acn
JimmyRay10acn
3. RE: Layer 3/4 Pen tests
Dec 24 2008, 11:52 AM EST | Post edited: Dec 24 2008, 11:52 AM EST
Depends on the switch and router manufacturer. I start out with basic SNMP decoding. Tools from SolarWInds are the stuff for this. Then move up to Dsniff and get used to arp poisoning, redirection and then work up to yerserna and finally start trying prefix hacks from Metasploit and other framework type hackers 0  out of 1 found this valuable. Do you?    

rtaccon
4. RE: Layer 3/4 Pen tests
Dec 25 2008, 5:46 AM EST | Post edited: Dec 25 2008, 5:46 AM EST
If you have no time to read the previous book (hacking exposed cisco networks) try (see the cisco / voip / wireless specific section):

http://www.vulnerabilityassessment.co.uk/Penetration%20Test.html
Do you find this valuable?