Tag Info

New answers tagged

0

You can easily set your up address as static and then change your Mac address to match that of the real hardware at that ip but I have not tried this and dont know how it would work in practice.. could create some interesting results when it comes to port jacking etc.


1

Absolutely. One way to go would be with ARP spoofing. It can be used to put your node as a gateway for the network.


0

Funny you ask that, I've been doing tests on that and the only thing I was able to spoof was the mac-address in Linux Backtrack such that I was able to tell my switch that I am another PCs mac address but NOT IP address such that I could see all the data being sent to the other PC and go on undetected (Man in the middle attack). You can however mask your ...


1

IP addresses starting with 10.* are reserved for local area networks. You seem to be on a LAN which does not allow you to ping any host outside of it. 10.x.0.1 seems to be a border-router which filters your pings.


1

Using some type of network montor, network tap, ping sweep, or other traffic monitoring tool.. No, capturing traffic is generally silet unless the attacker is trying to make noise and capture the traffic. There are sys admin tools which can monitor installed programs on authorized machines, and you can use network access control to limit unauthorized ...


0

You can always look for those Wifi and Ethernet cards which are in promiscuous mode as these shouldn't be so. If you deploy a good AV like sophos you can block all USB ports and CD drives. Lock down privileges to certain things such as CMD, Run and maybe C:. If you deploy a proxy you can filter the undesired website into a blacklist so the user cannot reach ...


3

There is no way to do that unless you can monitor the installed programs on your usersĀ“ PCs with a software like EMCO Software scanner.


1

It seems like you are really looking for the tool netdiscover. Netdiscover works by sending and listening for ARP packets. (active and passive mode). Since it is ARP, its limitation is that it only work on the same LAN (layer 2) - you cannot traverse gateway's. You do not have to change the ip address on your interface with this tool.



Top 50 recent answers are included