Re: DID Range Enumeration

From: Chris Reining (creiningat_private)
Date: Thu May 09 2002 - 13:59:25 PDT

  • Next message: Secure Green: "Re: DID Range Enumeration"

    I am not aware of any public resource that would provide you with this
    information, CMIIW. It would make sense to do fingerprinting of their
    phone ranges starting with a known number. Call every +/- 25th phone
    number from the original and see who answers. This way you should be able
    to discover where their block starts and ends. This poses a problem if 
    they have multiple blocks assigned, but google should be able to reveal 
    phone numbers associated with them.
    
    HTH
    
    On Tue, 7 May 2002, John Smith wrote:
    
     : I apologize if this is a double post, but my
     : connection was cut when I tried to send the first
     : time.
     : 
     : Does anyone know of a method to identify the DID
     : ranges assigned to a company?  As part of a blind
     : pen-test I have been asked to complete a war dial, but
     : the company does not want to give me the ranges.
     : 
     : I would greatly appreciate any help.
     : 
     : Thanx
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Thu May 09 2002 - 14:13:15 PDT