full-disclosure - Rogue Network Link Detection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue Dec  6 09:44:10 2005
From: dan-fd at f-box.org (DanB-FD)
Subject: Rogue Network Link Detection

Hi,

H D Moore wrote:

>I found an old document and some crappy perl code on my system, figured 
>someone might find it interesting:
>  
>
I wouldn't say crappy.

Indeed this is quite a handy little tool. I quickly discovered that I 
can now spoof traffic using our 3rd parties Data Center servers for 
approx 15 different IPs.
(I also discovered that ALL of our VoIP phones can be used as a gateway 
out... Not necessararly for spoofing but to circumvent firewall rules in 
place for the Data subnets...)

Also allows me to double check that the changes they made to our managed 
firewalls are in effect at each site.

Cheers,
DanBUK