paran0id’s blog

A notícia foi dada pela SecurityFocus ontem, dia 16, e relata uma falha de segurança extremamente simples na maneira como as redes ad-hoc são manipuladas em sistemas Microsoft.

Mark Loveless writes:
“An attacker can attach to the ad-hoc SSID and either manually assign an IP address in the 169.254 class B or simply DHCP and await a time-out that assigns the attacker’s laptop an IP address via a Link-Local configuration. After passively sniffing and waiting the usual NetBIOS traffic and/or by running a ping sweep, the victim’s IP address can be discovered. The attacker can then perform the various probes and attacks to gain access to the system.”

O artigo completo pode ser encontrado aqui, e o documento de Mark Loveless pode ser visto aqui.

Interessante.