MITM/Layer 3 and 4
From charlesreid1
Layer 3 = Network (IP protocol, packets)
Layer 4 = Transport (TCP protocol, packets)
Conducting Recon
Before carrying out any attacks, conduct recon. This is nmap territory. Here are some things you'll want to know:
- Number of clients on network
- Open ports, services running
- Operating systems
- Etc.
Layer 3 Attacks
Layer 4 Attacks
CAM list overflow (see Kali/Attack Layer 4)
DHCP attacks (see Kail/Attack Layer 4)
Rushing attack
Dealing with Encryption
Tools and techniques for dealing with SSL/TLS/other encryption methods