Er Amit Tripathi
Number of posts : 37 Age : 38 Location : Lucknow Job/hobbies : Software Engeener What U like To do ? : I Rocks With Computer System. Registration date : 2008-01-09
| Subject: Network Range (SCANNING AND FOOTPRINTING) 5 2/10/2008, 2:30 am | |
| - Quote :
Now that the pen test team has been able to locate name, phone numbers, addresses, some server names, and IP addresses, it's important to find out what range of IP addresses are available for scanning and further enumeration. If you take the IP address of a web server discovered earlier and enter it into the Whois lookup at www.arin.net, the network's range can be determined. As an example, 192.17.170.17 was entered into the ARIN Whois, and the following information was received: OrgName: target network OrgID: Target-2 Address: 1313 Mockingbird Road City: Anytown StateProv: Tx PostalCode: 72341 Country: US ReferralServer: rwhois://rwhois.exodus.net:4321/ NetRange: 192.17.12.0 - 192.17.12.255 CIDR: 192.17.0.0/24 NetName: SAVVIS NetHandle: NET-192-17-12-0-1 Parent: NET-192-0-0-0-0 This means that the target network has 254 total addresses. The attacker can now focus his efforts on the range from 192.17.12.1 to 192.17.12.254 /24. If these results don't prove satisfactory, traceroute can be used for additional mapping. | |
|