Re: remote MAC address discovery?

From: Stephen Friedl (steveat_private)
Date: Tue Dec 10 2002 - 10:01:32 PST

  • Next message: Martin Wasson: "Re: XSS Questions"

    > Is there any way to discover the MAC address of a device if you're not
    > connected to the local subnet?
    
    In general, no. But sometimes yes.
    
    1) If they have open NETBIOS, this can be fetched as a result of a NETBIOS
       namserver query. See my nbtscan tool:
    
    	http://www.unixwiz.net/tools/nbtscan.html
    
    2) if they have open SNMP, this can often be queried from the interface.
    
    3) if a *neighboring* machine has SNMP open, you can often query the ARP
       table to find it.
    
    Steve
    
    --- 
    Stephen J Friedl | Software Consultant | Tustin, CA |   +1 714 544-6561
    www.unixwiz.net  | I speak for me only |   KA8CMY   | steveat_private
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Tue Dec 10 2002 - 13:22:20 PST