.

iSCSI security

<<

sachitre

Newbie
Newbie

Posts: 22

Joined: Sat Jan 09, 2010 7:55 am

Post Wed Jul 21, 2010 10:31 pm

iSCSI security

Hi,

Does anyone have any experience with hacking iSCSI storage? If you find shared storage used by the DMZ and internal machines, is it possible to access the data/drives mapped to other servers?

Another scenario I am thinking of is if the storage network is not segregated and is shared with the data network it becomes vulnerable to the same attacks as your data network. Is there anything specific against iscsi in this case?

Any tools targeted towards iscsi attacks?

cheers
CISSP, GPEN, CCNA
<<

Ketchup

User avatar

Hero Member
Hero Member

Posts: 1021

Joined: Fri Jul 04, 2008 7:44 pm

Location: Philadelphia, PA

Post Thu Jul 22, 2010 7:24 am

Re: iSCSI security

The same IP-based attacks should work. Many iSCSI implementations rely on IP addresses restrictions, CHAP authentication, etc.  If you can get to the storage network, you should be able to use traditional methods to determine what you need to do to access a LUN or two. 
~~~~~~~~~~~~~~
Ketchup
<<

vekarman

User avatar

Newbie
Newbie

Posts: 28

Joined: Thu Mar 19, 2009 1:21 am

Post Thu Jul 22, 2010 7:42 am

Re: iSCSI security

Hi sachitre,

Have a look at following link:

https://www.isecpartners.com/storage_security_tools.html

I think you will find something worthwhile on this page.

Regards.

Kishore
CISSP

Return to Other

Who is online

Users browsing this forum: No registered users and 0 guests

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software