RE: DSL modems used for pen-testing

From: DeGennaro, Gregory <Gregory_DeGennaro(at)csaa.com>
Date: Wed Jul 09 2003 - 16:05:03 EDT

Nope, never had a problem. Perhaps a vulnerability or flaw in the modem itself?

Of course, the upload speed is slow but you know that since you work for Covad.

I ran ISS IS through mine.

Regards,

Greg DeGennaro Jr., CCNP
Security Analyst
Former PacBell ADSL Tech

-----Original Message-----

From: Toby Barrick [mailto:tbarrick@covad.net] Sent: Wednesday, July 09, 2003 12:13 PM
To: pen-test
Subject: DSL modems used for pen-testing

Has anyone else run into the problem of "swamping" the connection tables in their DSL modems (on the attack side and the target side)? I currently have a Zyxel 643 router/ADSL modem that I "wanted to use for pen-testing, but the darn thing dies when doing something as simple as a port scan.

I you have run into the problem, what was the fix other than throttling the scanning app? If a new modem, which one?

TIA Toby

---

The Lightning Console aggregates IDS events, correlates them with vulnerability info, reduces false positives with the click of a button, anddistributes this information to hundreds of users.

Visit Tenable Network Security at http://www.tenablesecurity.com to learn more.

---

---

The Lightning Console aggregates IDS events, correlates them with vulnerability info, reduces false positives with the click of a button, anddistributes this information to hundreds of users.

Visit Tenable Network Security at http://www.tenablesecurity.com to learn more.

---

Received on Wed Jul 9 18:30:08 2003