Fortunately, some clever programmers developed an easy-to-use, command-line tool, called ARP Scan ( arp-scan), that makes quick work of this type of reconnaissance. It is this feature (or flaw) that makes ARP a valuable reconnaissance tool. ARP must be allowed on a network for proper host-to-host communications. ARP maps IP addresses to MAC (hardware) addresses.ĪRP is effective in finding all network-connected devices, because you cannot block ARP. Instead, an effective solution is to use the Address Resolution Protocol (ARP). Ping is not an effective tool for finding every network-connected device. However, ping can be, and usually is, blocked from use against important network-connected devices such as routers, firewalls, switches, intrusion detection appliances, intrusion prevention appliances, servers, and even workstations. The first tool everyone thinks of is ping. You might think that this is an easy task, but it isn’t. One such recon technique involves finding every network-connected device on a subnet.
In both cases, such recon needs to be carried out as quickly and with as little impact to users as possible.
The most obvious thing system administrators and hackers have in common is the need for network reconnaissance (recon). Special Thanks: This article was made possible by support from Linux Professional Institute
0 kommentar(er)
