Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 38 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow General Certificationarrow Networkingarrow A slightly noob subnet mask question
EH-Net
May 23, 2013, 03:39:07 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: A slightly noob subnet mask question  (Read 4953 times)
0 Members and 1 Guest are viewing this topic.
Dranex
Newbie
*
Offline Offline

Posts: 16



View Profile
« on: December 01, 2011, 01:47:28 PM »

Hi guys, new forum member here!

I'm currently studying like crazy with the hope of doing an OSCP qualification when I learn enough, but as my question was network related I thought it maybe best to post it here..


I've been following this guide
http://www.infiltrated.net/pentesting101.html

and learning all the essential areas it describes until i get to the following line from the networking part..

"You will need a firm grasp on subnetting. The differences between a Class A, B and C network, and no a Class C is not a slash twenty four (/24). If that came as a surprise to you, then you seriously need to go back and read. "

This has confused me a LOT, from my previous University studies I was lead to believe that a Class C subnet IS slash 24 (/24) as it has 24 of the possible 32 bits active (255.255.255.0) and pretty much everything i've researched has backed that up.. have I missed something obvious here??
Logged
l33t5h@rk
Jr. Member
**
Offline Offline

Posts: 79



View Profile WWW
« Reply #1 on: December 01, 2011, 02:08:02 PM »

Perhaps they mean don't just think that because something has a /24 that means it's a Class C?

Network classes & first octets (for classful networks)
A    0 - 127
B    128 - 191
C    192 - 223
Logged
3xban
Hero Member
*****
Offline Offline

Posts: 608


View Profile WWW
« Reply #2 on: December 01, 2011, 02:14:37 PM »

Some elaboration on l33t5h@rk's info...

You can take a Class A/B network and subnet it down further to smaller networks.  for instance 10.0.0.0/24, the octets fall into a Class A network but the CIDR notation makes it look as if it is a Class C.  It may contain the same number IPs but it is part of a much larger network.

Someone correct me if I am off, but that is how I interpret it.
Logged

Certs: GCWN
(@)Dewser
l33t5h@rk
Jr. Member
**
Offline Offline

Posts: 79



View Profile WWW
« Reply #3 on: December 01, 2011, 02:32:55 PM »

You can take a Class A/B network and subnet it down further to smaller networks.  for instance 10.0.0.0/24, the octets fall into a Class A network but the CIDR notation makes it look as if it is a Class C. 

What he said  Cheesy

This is the only way I can see the comments making sense is if it was served as a warning as opposed to a fact.
Logged
lorddicranius
Sr. Member
****
Offline Offline

Posts: 447



View Profile WWW
« Reply #4 on: December 01, 2011, 02:39:16 PM »

Exactly what l33t5h@rk and 3xban have said.  Cisco has a good tutorial on subnetting:

http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a00800a67f5.shtml

As well as Wikipedia's page on subnetting:

http://en.wikipedia.org/wiki/Subnetwork
Logged

GSEC, eCPPT, Sec+
xXxKrisxXx
Hero Member
*****
Offline Offline

Posts: 512



View Profile
« Reply #5 on: December 01, 2011, 03:51:00 PM »

Hi Dranex,

Welcome to EthicalHacker.net ! Just incase this helps, I've compiled a decent size list of video links that'll should bring you up to par on Subnetting.

Subnetting in 6 Easy Steps Part 1
http://www.youtube.com/watch?v=wl5_J0UtINg

Subnetting in 6 Easy Steps Part 2
http://www.youtube.com/watch?v=vi1dtaQ1FEo

Subnetting in 6 Easy Steps Part 3
http://www.youtube.com/watch?v=F68dgzY652k

I've uploaded the bottom two that were taken directly from a college class I took called TCP/IP Protocols.

Subnetting Secrets - 26 Bit Mask Example
http://www.youtube.com/watch?v=A9Ica4EfDU8

Subnetting Example
http://www.youtube.com/watch?v=93F1Vbc2ya8


Logged

eCPPT, GCIH, OSCP, OSWP
Dranex
Newbie
*
Offline Offline

Posts: 16



View Profile
« Reply #6 on: December 01, 2011, 04:42:56 PM »

Overwhelmed by the help guys, really appreciated.
Logged
El33tsamurai
Full Member
***
Offline Offline

Posts: 192


View Profile
« Reply #7 on: December 01, 2011, 06:15:34 PM »

Are you planning on taking the OSCP soon?
Logged

CCENT, A+, Network+, Security+
Dranex
Newbie
*
Offline Offline

Posts: 16



View Profile
« Reply #8 on: December 02, 2011, 07:42:11 AM »

I would love to, but i'm a few months of learning away I think, I would love to learn python first too, but i'm not sure exactly how essential that would be..
Logged
Dranex
Newbie
*
Offline Offline

Posts: 16



View Profile
« Reply #9 on: December 02, 2011, 07:56:32 AM »

Exactly what point do I need to be at before I should be comfortable taking it on with the course materials and research supplementing?

I studied Computing in Uni (Forensics unfortunately, wishing I went down the security route to begin with) so my knowledge of computing is pretty high, most of the stuff we did was with Windows but from a personal geekage point of view I understand Backtrack Linux pretty well now.

I understand networking and the layouts, the OSI model, TCP/IP, Subnetting (thanks to the help you guys left me). I learnt Vivek's Metasploit Megaprimer about a thousand times and read the pentesting with Metasploit book, so i'm pretty comfortable with msf now too.

Is an exploit friendly language the next step or is there somewhere I could better spend my time such as specific exploits, SSH tunneling, SQL injections?

Any help you can give is always greatly appreciated.

(p.s. If you think this question is better off moved to the OSCP specific section I understand)

Logged
3xban
Hero Member
*****
Offline Offline

Posts: 608


View Profile WWW
« Reply #10 on: December 02, 2011, 08:36:06 AM »

I was trying to look for the thread were someone put together a very simple list of things you should know before hitting the test but I couldn't find it.  But luckily I jotted it down for my own reference:

Quote
Learn Python Scripting (diveintopython.org) - I have also been using learnpythonthehardware.org

BASH Scripting

Know what assembly language looks like (book - Hacking: the art of exploitation by John Erickson)

Organizational skills for all the data you will enumerate

A joy of puzzles

Whoever wrote that please chime in. 
Logged

Certs: GCWN
(@)Dewser
chrisj
Hero Member
*****
Offline Offline

Posts: 1163


View Profile WWW
« Reply #11 on: December 02, 2011, 11:00:13 AM »

I know johy come late, but the thing to remember

Classful networking. Class A, B, C, D and E (if I remember them correctly)

CIDR (Classless Inner Domain Routing) you're slashes and subnets. (if I remember correctly) Smiley

Back in the 90s, I worked for one of the original six backbone providers. I remember it took two of us, to explain to an ISP the concept of CIDR. They were used to classes, not the classless.
« Last Edit: December 02, 2011, 11:01:56 AM by chrisj » Logged

OSWP, Sec+
eth3real
Sr. Member
****
Offline Offline

Posts: 309



View Profile WWW
« Reply #12 on: December 02, 2011, 11:05:48 AM »

learnpythonthehardware.org
Should this be learnpythonthehardway.org?

I haven't used either of those sites, but I'm going to have to give them a shot. Smiley
Logged

Put that in your pipe and grep it!
3xban
Hero Member
*****
Offline Offline

Posts: 608


View Profile WWW
« Reply #13 on: December 02, 2011, 11:41:30 AM »

woops  yeah way not ware Cheesy
Logged

Certs: GCWN
(@)Dewser
El33tsamurai
Full Member
***
Offline Offline

Posts: 192


View Profile
« Reply #14 on: December 03, 2011, 09:34:43 AM »

I would love to, but i'm a few months of learning away I think, I would love to learn python first too, but i'm not sure exactly how essential that would be..

I am taking the class right now and I would say basic python skills are needed.

http://code.google.com/intl/ru/edu/languages/google-python-class/
Logged

CCENT, A+, Network+, Security+
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.08 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.