The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
0answers
13 views

ArpON not working

i'm trying to setup ArpON on my laptop running Ubuntu 14.04. I have a DHCP network so in the configuration i uncommented the DARPI line, then set RUN to yes. Then i started the daemon with sudo ...
1
vote
0answers
87 views

How can I launch DHCP starvation attack in WLAN?

In WLAN, due to MAC association on Access Point (AP), I can't send the DHCPDISCOVER messages using random MAC addresses. But if I keep my original MAC address as the source ethernet MAC a and random ...
2
votes
3answers
314 views

How can I set up DHCP so that domain devices get a certain block of IP addresses and other non-domain devices get a separate block?

Is there a way for me to set up DHCP so that only domain devices get an IP Address from a certain subnet, say 192.168.12.x, and other non-domain devices would be assigned to a different subnet? Edit: ...
3
votes
1answer
208 views

Is it possible to intercept traffic by using a WAN facing DHCP server on an ISPs cable network?

I am running pfSense on an edge firewall conncted to a cable line. I can see many DHCP requests hitting my firewall. I guess this requests are getting send by cable modems currently booting up and ...
1
vote
2answers
189 views

How does DHCP starvation work? How to prevent it?

Is it the same as DHCP exhaustion? Can LANs be vulnerable to such attacks or it's against WiFi only?
2
votes
1answer
2k views

shellshock dhcp exploitation

An attacker can exploit the bash bug in the DHCP protocol. On searching , how this can be performed , I found "http://www.sectechno.com/2014/09/28/shellshock-dhcp-server-exploitation/" , but could ...
8
votes
2answers
3k views

Is connecting to an open WiFi router with DHCP in Linux susceptible to Shellshock?

Source: http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html For the same reason, userland DHCP clients that invoke configuration scripts and use variables to pass down ...
0
votes
2answers
145 views

PXE TFTP Vulnerabilities

I am planning to implement diskless clients for booting Windows 7 clients. I am trying to determine whether to use PXE with TFTP or iPXE with HTTPS or iSCSI. Are there any vulnerabilities with using ...
2
votes
3answers
1k views

What are the biggest security concerns on PXE?

What are the top security concerns when setting up a PXE (Preboot Execution Environment) booting environment, ordered by severity of a possible exploitation? Things that I thought of are (in no ...
1
vote
1answer
106 views

DHCP Exhaustion [closed]

I am trying to look for another tool to perform DHCP Exhaustion, I currently use metasploit, but I want to see what other open source are out there. Please let me know if you use something else.
2
votes
1answer
3k views

How to prevent DHCP Starvation attack?

All this while, I assumed that switchport security is enough to prevent DHCP dos attack. If I set it maximum 1, there can be no more mac addresses packets. But, a friend told me that using the tool, ...
7
votes
3answers
17k views

Detecting(and locating) rogue DHCP server on a local area network

How would we detect and locate a rogue DHCP server on our local area network?
-3
votes
2answers
419 views

How do cellphones discover wireless APs? [closed]

I'm trying to find some information on how cellphones discover which wireless networks are in range? Is it via ARP or DHCP discover? Also how often does a cellphone do this polling? I can't find any ...
0
votes
2answers
566 views

bootp enabled by default on dhcp reduce security?

by default in Microsoft DHCP server configuration Bootp is enabled and choose both(accept DHCP request and Bootp ) i know that how this work and know about how configure two DHCP Server by Bootp ...
13
votes
3answers
2k views

Is a predictable MAC address a risk?

If you knew from the public internet that a certain IP address belonged to a machine with a certain MAC address, can you see any security exposure associated with that? I know that some software will ...
2
votes
5answers
7k views

Stopping users from spoofing an IP

I have a MikroTik router (that has firewall and scripting capabilities) that is acting as a DHCP server for the 192.168.1.0/24 subnet. Is there any way I can stop it from passing traffic from a user ...
4
votes
4answers
15k views

What are the laws regarding ISP recording IP addresses? How would they know who had which?

Since most internet users have ISPs using dynamic IP addresses (e.g. someone gets a new external IP address every few days) are there any laws requiring the ISPs to keep logs associating an IP address ...
-1
votes
1answer
250 views

Impact of attack occured in Radius, DHCP and HTTP servers on VOIP?

Assume we can crash the RADIUS server in a VOIP system. What would be the impact on the confidentiality, integrity, and availability of VOIP service. What would be the impact if the same question if ...
2
votes
1answer
565 views

Large lan party : How to identify the users on the network?

I would like to know what are the good way to identify users on a large lan party when you manage network ? I had the idea to make the users register them self at a desk, they give us Firstname, ...
3
votes
1answer
470 views

captive portal wikipedia article

Something on the wikipedia page regarding captive portals have confused me: http://en.wikipedia.org/wiki/Captive_portal When a client requests a website, DNS is queried by the browser. The ...
8
votes
6answers
2k views

How can I restrict access to network data by an unauthorized computer that connects via Ethernet?

I assume I can configure most routers to only assign IP addresses to specific MAC addresses, as is possible with wireless routers. However what if a computer is connected via Ethernet and does not ...
3
votes
5answers
11k views

Setting DHCP lease time to very small time increases security?

Yes or No? :O And why?
15
votes
5answers
21k views

DHCP vs. Static IP Addressing

How do DHCP and Static IP addressing compare, from a security standpoint? What are the risks/benefits associated with each? I know the preferred solution between the two will vary with network size ...