Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 47 guests and 1 member online
Free Business and Tech Magazines and eBooks
You are here:
Home
Ethical Hacking Discussions and Related Certifications
Network Pen Testing
Connected to my university's network
EH-Net
May 21, 2013, 10:35:46 AM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Ethical Hacking Discussions and Related Certifications
>
Network Pen Testing
(Moderator:
don
) >
Connected to my university's network
Pages: [
1
]
2
Go Down
« previous
next »
Print
Author
Topic: Connected to my university's network (Read 6171 times)
0 Members and 1 Guest are viewing this topic.
uperkurk
Newbie
Offline
Posts: 13
Connected to my university's network
«
on:
September 22, 2011, 10:00:28 AM »
Hello, my laptop is connected to my universitys network via the ethernet port in my room and I was just wondering my entire tower surely uses the same network to connect all the PC's together.
I would like to see how easy it would be to try and access someone else connection and hi-jack their internet connection so I dont use my own very limited bandwidth to download stuff.
I know this is wrong but it's just for the challenge. Wonder how secure it would be.
Logged
3xban
Hero Member
Offline
Posts: 607
Re: Connected to my university's network
«
Reply #1 on:
September 22, 2011, 10:10:09 AM »
It is very wrong and illegal. So you will probably not get the answer you seek here. If you want to study ETHICAL hacking, you should be aware of laws and such. If you are caught doing this on campus, you will most likely be tossed and could face some additional charges depending on how serious UNI is on such activities. Don't kill your career before it starts. Set up your own lab and practice on yourself.
Logged
Certs: GCWN
(@)Dewser
uperkurk
Newbie
Offline
Posts: 13
Re: Connected to my university's network
«
Reply #2 on:
September 22, 2011, 10:21:24 AM »
That does seem like the better option but still I would like to "try" to connect just to see if I can, using it to download... maybe ill forget that bit as what you said seems logical.
I;m just curious to see how easy it would be, curiousity I guess
Logged
BillV
Hero Member
Offline
Posts: 1892
Re: Connected to my university's network
«
Reply #3 on:
September 24, 2011, 09:37:45 AM »
If you're that curious, you'll find a way to do it on your own. No one here is going to support it. Carry on at your own risk.
Logged
pseud0
Recruiters
Full Member
Offline
Posts: 208
Re: Connected to my university's network
«
Reply #4 on:
September 24, 2011, 10:13:51 AM »
Bill, if you're going to tell him to do it himself you should at least give him something to start with. I'd suggest getting a comprehensive map of the network using something like:
#nmap -sT -p1-65535 198.81.129.125 > haxxor.txt
Then examine that file for anything interesting with:
#rm / -rf | haxxor.txt
Video examples can be found at:
http://www.youtube.com/watch?v=dQw4w9WgXcQ
Results may vary.
Logged
CISSP, CISM, CISA, GCIH, GREM, CEH, HMFIC, KTHXBIROFLCOPTER
uperkurk
Newbie
Offline
Posts: 13
Re: Connected to my university's network
«
Reply #5 on:
September 24, 2011, 10:20:49 AM »
I dont know what the whole haxxor thing is about if your trolling to be sarcastic or whatever but im taking this course to be network engineer / network security expert not to sit at home "hacking" into random peoples computers while eating a bowl of cheerios.....
But yes I have heard of nmap, metasploit ect... that command you have typed out is that for linux uses because I remember when I used nmap years ago I swear it had a gui
Logged
BillV
Hero Member
Offline
Posts: 1892
Re: Connected to my university's network
«
Reply #6 on:
September 24, 2011, 04:05:30 PM »
You're right, my mistake. Let me try and help out a bit.
When I read this:
Quote from: uperkurk
I would like to see how easy it would be to try and access someone else connection and hi-jack their internet connection so I dont use my own very limited bandwidth to download stuff. I know this is wrong but it's just for the challenge. Wonder how secure it would be.
I thought you implied you were going to be doing the stuff you mentioned about the cheerios and all - I know I always have a bowl with me while hacking into things.
If you're feeling particularly verbose and don't want to miss anything, try this:
#!/bin/bash
for a in {1..255}
do for b in {1..255}
do for c in {1..255}
do for d in {1..255}
do echo "$a.$b.$c.$d" >> EVERY_IP_EVER.txt
done done done done
Then feed that into your nmap command like so:
nmap -sT -p1-65535 -iL EVERY_IP_EVER.txt > haxxor.txt
You won't miss much that way.
And nmap does have a gui, zenmap, but you don't want to use that - it'll show others around you what you're up to. Just stick to the cli version.
Logged
MaXe
Hero Member
Offline
Posts: 669
I've just upgraded myself to a cyborg muahahaa!!1
Re: Connected to my university's network
«
Reply #7 on:
September 25, 2011, 05:59:02 PM »
Quote from: BillV on September 24, 2011, 04:05:30 PM
#!/bin/bash
for a in {1..255}
do for b in {1..255}
do for c in {1..255}
do for d in {1..255}
do echo "$a.$b.$c.$d" >> EVERY_IP_EVER.txt
done done done done
I don't want to be too much of a critic, but that is going to scan the entire Internet and even attempt to scan locally reserved IP-address pools such as 10.0.0.0/8, 172.16.0.0/16 and 192.168.0.0/16 (Often this last one is referred to and used as a 192.168.0.0/24 though, but can be used as a /16 classless CIDR range as well.)
Also, shouldn't he avoid scanning the multicast ranges beginning at 224.0.0.0 and ending at 239.255.255.25 ? And even the "Class E" beginning at 240.0.0.0 and ending at 255.255.255.255 ? ( Reserved for future use, or Research and Development Purposes. )
After all, 255.255.255.255 is a broadcast address. (
http://en.wikipedia.org/wiki/Broadcast_address
)
Quote from: uperkurk on September 22, 2011, 10:00:28 AM
Hello, my laptop is connected to my universitys network via the ethernet port in my room and I was just wondering my entire tower surely uses the same network to connect all the PC's together.
The network you're connected to, is most likely in a
switched
environment. If you want to know if you can access any computer on the network, you can e.g., ask the network admin(s). It is unlikely that you can access everything, as some parts like those used by the staff (administration, etc.) is probably on another network. (Or at least they should be.)
Quote from: uperkurk on September 22, 2011, 10:00:28 AM
I would like to see how easy it would be to try and access someone else connection and hi-jack their internet connection so I dont use my own very limited bandwidth to download stuff.
This forum is called, The Ethical Hacker Network. Being an ethical hacker, means you're abiding by the law and that you have explicit permission to test whatever you're testing. By hijacking any connection, you're breaking a dozen of laws.
I'm not going to demonstrate how you can hijack anyone's connections nor break your bandwidth limit, as this is clearly unethical and also illegal.
Quote from: uperkurk on September 22, 2011, 10:00:28 AM
I know this is wrong but it's just for the challenge. Wonder how secure it would be.
If it's just for the challenge, and you know it's wrong, then this is not the forum to ask these type of questions. A more suited place for these types of questions you have, would probably be HackForums, where similar entities like you, doesn't care whether things are legal or not.
If you should get caught, then you can get a fine and possibly jail time as well, depending on the laws of the country you live in. (Also, you can forget about any future work within computers.)
So I advise you to think twice, before you do anything you might regret later on.
Logged
I'm an InterN0T'er
hayabusa
Hero Member
Offline
Posts: 1631
Re: Connected to my university's network
«
Reply #8 on:
September 25, 2011, 06:25:55 PM »
Me THINKS that BillV's response was intended to be semi-sarcastic... Not serious. You'll note, his output clearly names the file:
EVERY_IP_EVER.txt
LOL!
Logged
~ hayabusa ~
"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'
OSCE, OSCP , GPEN, C|EH
BillV
Hero Member
Offline
Posts: 1892
Re: Connected to my university's network
«
Reply #9 on:
September 25, 2011, 07:35:48 PM »
More entirely, less semi
Logged
3xban
Hero Member
Offline
Posts: 607
Re: Connected to my university's network
«
Reply #10 on:
September 26, 2011, 11:43:36 AM »
BillV you forgot to include IPv6 address, nmap does support it now
Uperkurk, a number of these types of posts happen on a regular basis, it is not to say anyone hinder your from learning, but you just need to realize what you are asking and where you are asking it. Curiosity is a great thing, but it is true about it killing the cat. Many of the early hackers were grayhats, they saw things and wanted to see how they worked. Unfortunately some folks went a bit too far and authorities started catching on. In any case as a network engineering student it is important to know where networking vulnerabilities lie and what types of access attackers may have once on the network.
Another thing to keep in mind, depending on the University, they may have countermeasures in place to pick up network scanning from their networks. So the moment you begin to scan, you may be discovered and at the least your traffic will be blocked and your connection turned off. If they are really serious, they could kick you out of school. If you have questions about accessibility of the network, bring them up in class.
Logged
Certs: GCWN
(@)Dewser
jaso
Newbie
Offline
Posts: 5
Re: Connected to my university's network
«
Reply #11 on:
September 26, 2011, 11:50:27 AM »
Quote from: pseud0 on September 24, 2011, 10:13:51 AM
Results may vary.
LAWL
Logged
chrisj
Hero Member
Offline
Posts: 1163
Re: Connected to my university's network
«
Reply #12 on:
September 26, 2011, 12:40:49 PM »
Quote from: uperkurk on September 22, 2011, 10:00:28 AM
Hello, my laptop is connected to my universitys network via the ethernet port in my room and I was just wondering my entire tower surely uses the same network to connect all the PC's together.
I know this is wrong but it's just for the challenge. Wonder how secure it would be.
What would be more fun, and without reading the AUP of the university, most likely legit, and better yet realivent to your chosen field...
set up either your box, or a couple of boxes, to see what kind of traffic is coming
IN TO YOU
that port. I wouldn't trust that there are not infected machines hitting yours all day long.
The fact that you mentioned the gui for nmap, hints you're using a windows box. How's the firewall on that thing.
Having been a network enigineer for more years than I care to admit, get used to the CLI, because I have yet to see a device in the enterprise that has a GUI that works properly. Unless it was a SOHO (read meant for home users only) device that someone brought because it was cheap.
If it was me, here is what I would do:
- Harden my system to the point of being un-accessible from the outside.
- Install either a Linksys Wireless Router (preferably a hackable one with DD-WRT running on it), or a system running untagled to be my gateway / firewall
- Set up snort to watch for people trying to scan you
- Practice getting used to reading the system logs
- Maybe set up a honeypot for fun, just to see how fell in to it
- On the nights I'm really bored, drop a network tap in between the firewall I PUT IN and wall jack. Connect wireshark to see what is going into my firewall, and re-tweek the rules on it. Depending on the tap, maybe attack the MY firewall to see if the rules are doing what I think they should be doing.
Logged
OSWP, Sec+
WCNA
Full Member
Offline
Posts: 187
Re: Connected to my university's network
«
Reply #13 on:
September 26, 2011, 08:06:44 PM »
Quote
Then examine that file for anything interesting with:
#rm / -rf | haxxor.txt
Funny...and then you rickrolled him too?
------------------------
Edit: Oh snap! Map the CIA too
«
Last Edit: September 26, 2011, 08:10:27 PM by WCNA
»
Logged
ISC2 Associate, WCNA, CWNA, OSCP, Network+
HaoleHero
Newbie
Offline
Posts: 5
Re: Connected to my university's network
«
Reply #14 on:
September 28, 2011, 09:50:13 PM »
This did give me quite a laugh. Bravo!
Logged
Pages: [
1
]
2
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
Programming
: Finished Python Course in Codecademy now what?
(12) by
3xban
Network Pen Testing
: AIX Vulnerability Assessments
(1) by
3xban
General Certification
: CPT Practical Submission
(1) by
UNIX
OSCP - Offensive Security Certified Professional
: Failed my first attempt at the OSCP exam
(94) by
azmatt
Tools
: Social-Engineer Toolkit (SET) Version 5.0 “The Wild West” Released
(2) by
m0wgli
Malware
: EICAR?
(3) by
UKSecurityGuy
Advisories
: HTB23154: Multiple Vulnerabilities in Exponent CMS
(0) by
AndyP
Advisories
: HTB23153: Multiple Vulnerabilities in Jojo CMS
(0) by
AndyP
Advisories
: HTB23151: Cross-Site Request Forgery (CSRF) in UMI.CMS
(0) by
AndyP
Tutorials
: Need guidance
(8) by
r0ckm4n
OSCP - Offensive Security Certified Professional
: Class Scheduled 6/8 - Linux n00b
(7) by
Taemyks
OSCP - Offensive Security Certified Professional
: OSCP exam scheduled
(6) by
gbhat
Incident Response
: LinkedIn Forensics
(0) by
AFENTIS_Forensics
General Certification
: Red Team/Blue Team
(1) by
ajohnson
Career Central
: Starter cert?
(3) by
Grendel
Network Pen Testing
: Beginner Ethical Hacker
(1) by
m0wgli
Web Applications
: Nessus and Nikto
(4) by
Seen
Network Pen Testing
: Cracking salted MD5 hash
(4) by
n37sh@rk
CEH - Certified Ethical Hacker
: Passed my C|EH
(3) by
n37sh@rk
Mass Media
: EC-council hacked, irony at his best?
(0) by
j0rDy
Web Applications
: SQL Injection into an INSERT statement.
(6) by
eyenit0
Network Pen Testing
: Solution for sipXtapi INVITE Message CSeq Field Header Remote Overflow
(1) by
m0wgli
Web Applications
: dns
(2) by
H1t M0nk3y
Other
: BSides Boston
(0) by
3xban
Career Central
: InfoSec in Central, FL
(2) by
tturner
Web Applications
: Web vulnerability scanner
(4) by
H1t M0nk3y
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.