War dialing is one of the oldest methods of gaining unauthorized access to the target systems, it is one of the dangers most commonly forgotten by network engineers and system administrators. A hacker can sneak past all the expensive firewalls and IDS and connect easily into the network. Through wardialing an attacker searches for the devices located in the target network infrastructure that are also accessible through the telephone line.
‘Dial backup’ in routers is most frequently found in networks where redundancy is required. Dial-on-demand routing(DDR) is commonly used to establish connectivity as a backup.
As a security testers, how would you discover what telephone numbers to dial-in to the router?
- Search the Internet for leakage for target company’s telephone number to dial-in
- Run a war-dialing tool with range of phone numbers and look for CONNECT Response
- Connect using ISP’s remote-dial in number since the company’s router has a leased line connection established with them
- Brute force the company’s PABX system to retrieve the range of telephone numbers to dial-in
Answer(s): B
Explanation:
Use a program like Toneloc to scan the company’s range of phone numbers.