Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 47 guests and 1 member online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow Need some insight
EH-Net
May 21, 2013, 06:09:10 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Need some insight  (Read 6087 times)
0 Members and 1 Guest are viewing this topic.
Saber123316
Newbie
*
Offline Offline

Posts: 7


View Profile
« on: March 02, 2008, 04:52:57 AM »

Not so much a hacking post as it is general Help.

I got layed off from my original employer and found work with a local IT company that is based around the world best thing that has ever happened to me as I am constantly being challenged my first "test" is this. I have no way to go around doing this I need some help.

I have to tunnel RDP through SSH via putty to my home network from a windows server 2k3 box. now that seems to be the easy part however the server is running off a linux host as a VMware machine. so I have access to the linux host just not the windows host. the vm is on its own internal lan by the looks of it. something like a 10.50.10.x.

any way to find that machines IP without a scanner using linux commands? how would you guys do this?

P.S. Thanks for all your help in advance.
Logged
BillV
Hero Member
*****
Offline Offline

Posts: 1892


View Profile WWW
« Reply #1 on: March 02, 2008, 08:55:51 AM »

I think I'm confused.

You need the IP of a Win2K3 VM, running on a Linux Host, and this is on a server at your work?

You have access to the Linux Host, but no access to the Win2K3 VM?

If you have no access, what good is finding the IP?
Logged
pseud0
Recruiters
Full Member
*
Offline Offline

Posts: 208



View Profile
« Reply #2 on: March 02, 2008, 09:34:49 AM »

I'm a bit confused also.  If you have access to the host then usually you can just do a ifconfig (*ix) or ipconfig (windows) and it will give you a list of listening NICs.  That includes real and virtual.  If that doesn't work for some reason, and you have full access to the host, you can us VMware itself to get the IP.  Just look at the configuration for the instance you are interested in.  When you look at the NIC configuration it should show you was IP range it is set to, or the IP pool that it can pull a range from (for example 10.10.10.0/24).  Your description sounds like you are NATing using your linux host's physical NIC.  That means it should be pretty straightforward to tunnel out of the w2k3 server, but not fun trying to setup the tunnel from your home network into that server.
Logged

CISSP, CISM, CISA, GCIH, GREM, CEH, HMFIC, KTHXBIROFLCOPTER
don
Editor-In-Chief
Administrator
Hero Member
*****
Online Online

Posts: 4165


Editor-In-Chief


View Profile WWW
« Reply #3 on: March 02, 2008, 09:38:29 AM »

Try bridging the virtual network adapter for the Win2K3 VM and then assign it an IP address on the same subnet as the Linux Host. You should now be able to reach the Win2K3 machine directly.

Hope this helps,
Don
Logged

CISSP, MCSE, CSTA, Security+ SME
LSOChris
Guest
« Reply #4 on: March 02, 2008, 02:05:56 PM »

just do a simple bash script to ping all the hosts in your 10.10.50.x range

.1 should be your vmware gateway
Logged
Saber123316
Newbie
*
Offline Offline

Posts: 7


View Profile
« Reply #5 on: March 02, 2008, 05:59:23 PM »

alright

A brief update on what happened.


This morning I got up sand started talking to the admin who tasked me with getting remote access to the network. so I went about and got added to the sudo list. after that I went Sudo Nmap -sP 192.168.10.* the machine is on that subnet. got 8 machines up 1 was a router 1 was the linux host 4 pc's and 1 server so I did a Nmap -A and got the server finally I got the servers IP I went into PuTTy and put in the tunnel and VOILA I had access to the server through a ssh tunnel.

Now I got suckered into handling all the Domain work for this little network. Cheesy
Logged
don
Editor-In-Chief
Administrator
Hero Member
*****
Online Online

Posts: 4165


Editor-In-Chief


View Profile WWW
« Reply #6 on: March 02, 2008, 09:18:11 PM »

You've shown your woirth and were given additional duties. That's how you climb that ladder. Well done.

Don
Logged

CISSP, MCSE, CSTA, Security+ SME
shawal
Jr. Member
**
Offline Offline

Posts: 88


View Profile
« Reply #7 on: March 11, 2008, 03:30:56 AM »

ChrisG,

ping -b [broadcast address] will ping all hosts in that broadcast domain, no need for a shell script given that he is runing it from Linux, do 't know what is the equivalent to that in Windows

Logged

RHCE, GIAC GCIH.
Andrew Waite
Hero Member
*****
Offline Offline

Posts: 928



View Profile WWW
« Reply #8 on: March 11, 2008, 03:46:33 AM »

Shawal,

ping -b [broadcast address] will ping all hosts in that broadcast domain

Nice tip, haven't come across that one before. One more for the toolbox Wink
Logged

Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.053 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.