Skip to main content
12 votes

How to identify L2 devices in a Wide Area Network?

Information from layer 2 are usually not propagated to the higher layers because they are not needed there. Exceptions are protocols like ARP but this is only visible inside the local network. This ...
Steffen Ullrich's user avatar
4 votes
Accepted

How to identify L2 devices in a Wide Area Network?

You can see some hop counts in the traceroute results, but there are certainly many devices in the middle; if you could capture traffic you could see that when a packet passes a device the source ...
GnP's user avatar
  • 2,299
4 votes

Can you scan unmanaged switches with vulnerability scanners?

The target switches do not have IP addresses and most scanners require IPs as targets. Can you scan unmanaged switches with vulnerability scanners? What scanners can target layer 2? It's useful to ...
vidarlo's user avatar
  • 16.1k
3 votes
Accepted

How Data Link layer trailer prevents data from being intercepted and tampers

In most cases the data link layer does not prevent interception and malicious tampering. Data link layer protocols like Ethernet or PPP usually have a checksum to detect accidental packet corruption, ...
Steffen Ullrich's user avatar
1 vote

Would it be possible to create an external mac address spoofer?

This is called a layer 3 bridge. It can be done with common hardware and a common OS like Linux. All what it is needed is a hardware with two network cards and to configure the OS as a layer 3 bridge. ...
Steffen Ullrich's user avatar
1 vote
Accepted

MITM using ARP spoofing with Kali Linux running on VirtualBox with bridged wifi network adapter

1) The problem is indeed that for communication with the VM the host's MAC address is used. This is what VirtualBox does when bridging to a wireless network adapter: From the VirtualBox manual: 6.5. ...
Stefan's user avatar
  • 141

Only top scored, non community-wiki answers of a minimum length are eligible