From: Oliver Petruzel (oliver.petruzel@corbett-tech.com)
Date: Tue Jun 11 2002 - 19:02:46 EDT
To clarify:
I know that most "vulnerabilities" in HSRP and such are DoS or spoofing (man-in-the-middle attacks) or both... is there a way, besides sniffing and analyzing just the traffic, to test router/switch configurations for flaws. a "probing method" if you will...such as with a nessus plugin or ISS? (this is per a client request)
I am familiar with IRPAS (attack suite: http://www.phenoelit.de/irpas/docu.html), but i need something less intrusive and highly automated that addresses the same protocols...
odd..i know...
./o.p.
-----Original Message-----
From: Oliver Petruzel [mailto:oliver.petruzel@corbett-tech.com]
Sent: Tuesday, June 11, 2002 4:17 PM
To: pen-test@securityfocus.com
Subject: Testing other prot's and layers.
Does anyone have any actual testing software or scripts to test VRRP and HSRP specfically?
Or does everyone do it manually if asked to do so?
Which COTS or open-source scanning products offer layer 2 or 3 testing modules?
thanks ahead of time!
./oliver p.
----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/
----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:22 EDT