Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to practice penetration testing on my home network. The target system is my desktop computer, which is connected to the network via ethernet cable. The attack system is my laptop, which is connected via Wi-Fi. My laptop is running Ubuntu Linux 12.10.

I'm simulating an attack by someone who has gained access to the wireless network, but is interested in data that resides on a particular computer which happens to be on the wired portion of the network - my desktop. In this scenario (foregoing any further knowledge I have about my network or the target system) I'm having a hard time finding the IP address of my desktop.

Tools such as ipscan or nmap only appear to find devices on the wireless side of the network. I know I could go to the router, and pull up the list of connected devices, but that would require foreknowledge (or cracking) of the router's password - something I'm pretending to not have at this point.

In this scenario, how can I use my laptop to find my desktop on the network and establish a connection? Again, I'm simulating the role of an outside attacker who's just gotten access to the Wi-Fi - all I know is the Wi-Fi SSID, Wi-Fi PSK, Wi-Fi AP's MAC address, and the network's gateway address.

share|improve this question
This isn't a security question, so it's off topic here. – Polynomial Feb 26 '13 at 20:42
Sorry, I thought of it as a security question. Where should I post it? – Andrea Mazzocchi Feb 26 '13 at 20:43
Perhaps super users, but to clarify you're on WiFi, and you want to determine which clients are ethernet based and which are WiFi based on the same router you're connected to? – Peleus Feb 26 '13 at 20:44
@Peleus I'm not sure they're looking to distinguish Wi-Fi vs. Wired. It seems they're positioning themselves as an intruder who's gotten access to the wireless network, and is now looking for a specific device - that device just happens to be known to be on the wired network. – Iszi Feb 26 '13 at 20:48
Not exactly: I can see on my personal modem configurations which computers are connected, for example: iPhone : wifi : 192.168.x.x myNotebook : wifi : 192.168.x.x myHomeComputer : ethernet : 192.168.x.x I saw this by digiting the IP address of my modem on the I know the IP address of my home computer, but I want to know if there's another way to find it out, for example through a shell (I'm running Ubuntu 12.10 on my Notebook). – Andrea Mazzocchi Feb 26 '13 at 20:48

I really don't get your question. Like you are describing it, you get access to wifi, that means you are in the network, therefore that means you can find any device in the network.

This sentence "Tools such as ipscan or nmap only appear to find devices on the wireless side of the network." doesn't make sense at all. Your network is your network, if you are connected to your network you should see each device connected, not only wireless.

Try a nmap -O -A 192.168.x.0/24 (why you hide local IP addresses? Pointless), this should show each device connected and its operating system, and if it were a real attack you could determine which computer is seeing information like hostname (e.g. Andrea-PC).

Another attack vector is the router, you would be surprised how many routers use default passwords like admin/admin.

share|improve this answer
It could be that the router has a guest WLAN. This would prevent direct access to the other computers on the private network. – John Rix Dec 4 '14 at 11:00

Simply so it shows as having an answer:

nmap -sn <your IP address>

...will perform a ping scan across all the connected hosts, quickly showing what IP's are responding to pings on your network.

Note that this is case-sensitive.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.