-2

I need to perform attacks (SQL injection) on a server. I thought of using a proxy to be anonymous, but the topology is a LAN without Internet access. I have no idea of the protocols used in the topology.

  • 12
    Anonymous on a LAN? Huh? You need to define your definition of anonymity. – forest Mar 13 at 10:35
  • 2
    Why do you want anonymity? From whom do you want to be anonymous? The answer to these questions will help to define an answer. Also, you can use a proxy in a LAN, you just have to set it up. – schroeder Mar 13 at 11:05
4

Anonymity on a LAN is a bit of an odd question but here are some points to address which I feel may aid in your quest.

Firstly if you are on the LAN plugging in your laptop via an Ethernet port, I know where you are. Your physical being would easily be identifiable by anyone choosing to look.

For the sake of discussion let us assume a nice easy scenario, you are connecting to an open WiFi using a high gain antenna from a safe distance, this WiFi simply being a poorly secured access point to give access to the LAN via wireless means.

Change the MAC of your network interface

A mac Address is made up of 6 parts 00:D0:94:00:00:00 The first 3 parts make the vender ID (who is the creator of your device) the second part is the unique identifier of your device. While it could take a lot of effort to find out who has this MAC, it is just good house keeping (especially if you have used the MAC on the network for legitimate purposes)

Change your hostname

This is just another piece of the puzzle; and can leak information as to what device you are using. default host names can make it fairly obvious what you are using.

Block as much traffic as you can

Firewall off your device, you want as little information leakage as possible when remaining anonymous, lets say you accidentally a service running (e.g. a web browser). Once again its the puzzle as a whole, not each issue by its self.

Virtual machine

I would recommend attaching an network card to a VM and running the attack from inside it, keeping your host segregated from the network.

So many things

You could use so many different ways, such as network implants, compromising other machines, stealing user credentials, using an onsite work station. the list is truly massive. For a more relevant answer to you, you would need to provide a lot more information of the network, your proximity, the size/type of organisation and much more than what you have provided

Disclaimer There is no guarantee in all of this but its a good foundation

  • I use 0050574E4552 as MAC for such activities :D – Overmind Mar 14 at 9:09
  • @Overmind I might have to use something like this in the future :P 00:09:BF:00:00:00 – TheHidden Mar 14 at 11:23
  • Looks good and has double meaning. – Overmind Mar 14 at 11:27
1

If the written contract which asks you to perform penetration testing at this organization also includes to check if the end users follow the security policies correctly, then this might be a good opportunity to check if everyone locks their PC when they leave their office. Using an unattended PC of someone else to demonstrate a vulnerability can be an effective way to demonstrate the importance of IT security to the end-users. It is a way to teach them that the security rules do not just protect the company but also protect them personally from wrong accusations.

But the question is what kind of security vulnerability you are trying to prove here. If an intranet web application is vulnerable to SQL injections, then it's vulnerable from every workplace which can access it. If you want to prove that the way they do access logging is unreliable, then you don't need to do so by performing an SQL injection.

-7

If using Linux, set your firewall to deny everything that's not allowed, spoof your hostname, change your MAC address. If you are using Windows then leave this place.

Or maybe try to do it from another client.

  • 3
    I think you should add more details as to why these things are important. Maybe mention about basic inventory practices that could determine even your location in the building due to the Ethernet port you have put plugged your lan cable into – TheHidden Mar 13 at 10:45
  • If somebody knows( 99.999% likely) that on port i.e. 2/12 FastEthernet is connected to patch panel that's connecting to the ethernet wall plug on 4th flor, room 5. Than it's pretty easy to locate you. That's why you should probbably do it via some victim's machine. – Antonio Zunic Mar 13 at 10:49
  • 7
    Why is Windows a problem? What do you mean by "leave this place"? Also, as mentioned above, can you add some detail as to why the things in your answer are important for anonymity? – schroeder Mar 13 at 11:08
  • 9
    I am severely unimpressed by the Windows quip. Elitism has no place here. – Polynomial Mar 13 at 11:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.