Download Hacking For Dummies
Transcript
Chapter 8 War Dialing In This Chapter Controlling dial-up access Testing for war dialing weaknesses Preventing war dialing W ar dialing — the act of using a computer to scan other computers automatically for accessible modems — was made popular in the movie War Games. War dialing seems old-fashioned and less sexy than other hacking techniques these days; however, it’s a very critical test to run against your network. This chapter shows how to test for war dialing vulnerabilities and outlines countermeasures to help keep your network from being victimized. War Dialing It’s amazing how often end users and careless network administrators connect modems to computers inside the network. Some companies spend an astonishing amount of money and effort to roll out intrusion-prevention software, application firewalls, and forensics protection tools while ignoring that an unsecured modem on the network can render that protection worthless. Modem safety Modems are still on today’s networks because of leftover remote access servers (RAS) that provide remote connectivity into the corporate network. Many network administrators — hesitant to deploy a VPN — still have modems on their servers and other hosts for other reasons, such as for administering the network, troubleshooting problems remotely, and even providing connectivity to remote offices. Some network administrators have legitimate modems installed for third-party monitoring purposes and business continuity; modems are a low-cost alternative network access method if the Internet connection is down. Many of these modems — and their software — run in default mode with weak passwords or none at all.