modem dialing

Hello all! I will be aging myself with this one...and by aging I mean I am too young still :(

So here is my concern. I am currently conducting an audit and ran a wardialer (PhoneSweep) against the modem in question. This is the FIRST time I have had to do a modem assesment in my Pen Testing. *sigh* Anyway, the wardialer didn't get in, thankfully... however there is something in the report that concerns me.

In the log file (found in the report), it seems that the modem I am dialing into is getting a command prompt similiar to the c:\> you see in a command prompt in the windows environment. How would I bring up a terminal window to emulate what the dialer is seeing so I can have control of what gets entered here.

I apologize in advance if I look like an idiot here. I just never ever ever ever work with modems... ever!

Additionally, this is for a penetration test and is not malicious in any form, save your neg's! :p

Any help you could give would be great.

Thanks,
-Deeboe

EDIT ----------
I just found out, I can use the MS HyperTerminal. Thanks anyway, I will leave the thread open for dicussion though. Thanks.

What software is listening for incoming calls on the modem?
That's what will determine what is presented to the dialer.
:cool:

Sorry i gotta ask this, sorry if i dont seem educated in this but i also never delt with wardialing.
But who still uses this technology? and if the information on the system is soo sensitive that they need an audit why are they still using old school dial in?

Quote:

---

But who still uses this technology? and if the information on the system is soo sensitive that they need an audit why are they still using old school dial in?

---

1. This is still widely used, although it is being phased out. It normally comes into play when you have employees who travel, and need on-site access to the remote network.

2. Audits should be done regardless of the sensitivity of the information they deal with.

3. Dial-in is no more or less secure than any other form of connection. When you take the proper precautions, it becomes a wonderful tool.

When you say you "war-dialled" this modem what exactly do you mean?

War dialling is no different to a pingsweep except it is used against a block of phone numbers to determine which reply. So if you are simply dialling a phone number that picks up the phone you are not really war-dialling.

What you can do is used Hyperterminal in it's verbose mode and see what the remote responds with to the initial request. Googling the response may give you a clue. One of the more common telephone programs is PCAnywhere... Try getting a copy and see if you can get in with that. CCRemote/CChost might still be in use and the other common one I can't recall the name of any more... I seem to remember something like [something]storm, (packet?), was the company... It was a terminal program with a blue background....

You have an answer... Now you gotta play with it.... :D

Damn, I'm old.... ;)

Quote:

---

Originally posted here by Tiger Shark
When you say you "war-dialled" this modem what exactly do you mean?

---

Once again, I will apologize for not knowing anything about this, so excuse my terminology if there is error in it.

In the PhoneSweep program, there is a list of account/password combinations that it tries over and over again. That is what I meant when I say I "war-dialled" the modem.

I ended up using Hyperterminal to dial into it. The results I got were sufficent for the purpose of the audit. It is over now, when I come accross another one, I will follow your advice on using PCAnywhere.

Thanks,
-Deeboe

No need to apologize... really... If we all knew everything we wouldn't be needed... ;)

PCAnywhere is the most common I still see.... We still use one box on my network... But it does a dialback so that once you use a set of credentials it calls the "proper" number back and "reverses" the connection so that not just anyone can dial in.

But there are still a few others out there that you should look at too.

Good luck... I have forgotten more about modems that I would care to relate... But I've forgotten them on purpose... :D

Just in case you wanted more information, I found some stuff quick:

SearchSecurity entry: http://searchsecurity.techtarget.com...546705,00.html

Wiki entry: http://en.wikipedia.org/wiki/War_dialing

pdf on war-dialing - in this case "The Art of Wardialing" published 1999: http://www.systemexperts.com/tutors/wardial-fiw1999.pdf

Annnd an interesting article - supporting what d0pp stated from the Register back in 2002:
http://www.theregister.co.uk/2002/04..._war_dialling/

PCAnywhere, PhoneSweep, and MS's own Hyperterminal are the software I have used. As TS mentioned, there are others "lurking" out there - but those mentioned just in my post and the others here are what I have worked with recently in testing modems.

Man - I still remember the 1200 baud modems and when the "turbo" button on the PC was a highly sought after feature... quick someone fetch me my prune juice! Back in my day... is there something about an onion I should be mentioning?!?

Howdy.

Quote:

---

Man - I still remember the 1200 baud modems

---

So do i, if you miss the highpitched noise they used to make when dialling in then check out This site. :D

Quote:

---

and when the "turbo" button on the PC was a highly sought after feature.

---

What was that Turbo button for anyhow.?. I've never noticed any difference when it was switched to low or high.

f2b

After extensive research with the Turbo buttons I had I came to the conclusion that it was only there to help you spend your money quicker... :)

Quote:

---

After extensive research with the Turbo buttons I had I came to the conclusion that it was only there to help you spend your money quicker...

---

That and acutally lose performance on the PC:

http://www.pcguide.com/ref/case/switchTurbo-c.html

But my IT manager at the time was delusional back then (or put in too many hours) and would put on goggles :cool: and driving gloves :eek:, hit the turbo button and thought he was going to light or "ridiculous" speed or time travel - ya know, cuz the machine was going sooo fast!... yeah... I told him it was to start the time machine and it was just disguised as a turbo button.

Quote:

---

So do i, if you miss the highpitched noise they used to make when dialling in then check out This site.

---

Woo-hoo! Woo-hoo! Woo-hoo! Man I missed that, now I'm good for another 5 years. :D