search

gwen001 / offsectools_www

A vast collection of security tools and resources curated by the community.
https://offsec.tools
181 stars 21 forks source link

[addtool] gateway-finder #806

Closed gwen001 closed 1 year ago

gwen001 commented 1 year ago

[homepage]https://github.com/whitel1st/gateway-finder-imp[/homepage] [tags]network,router,lan[/tags] [short_descr]Identify routers on the local LAN and paths to the Internet.[/short_descr] [long_descr]Gateway-finder is a scapy script that will help you determine which of the systems on the local LAN has IP forwarding enabled and which can reach the Internet.

This can be useful during Internal pentests when you want to quickly check for unauthorised routes to the Internet (e.g. rogue wireless access points) or routes to other Internal LANs. It doesn't perform a hugely thorough check, but it is quick at least. It's python, so it should be easy to modify to fit your needs.

You give the script the IP address of a system on the Internet you're trying to reach and it will send the following probes via each system on the local LAN:

An ICMP Ping An ICMP Ping with a TTL of 1 A TCP SYN packet to port 80 with a TTL of 1 A TCP SYN packet to port 443 A TCP SYN packet to port 23

It will report separately which systems send an ICMP "TTL exceeded in transit" message back (indicating that they're routers) and which respond to the probe (indicating that they're gateways to the Internet).[/long_descr] [image]https://raw.githubusercontent.com/gwen001/offsectools_www/main/c5c4a428a9fe4c108950765e0ec0a881.png[/image]

gwen001 commented 1 year ago

Issue correctly handled, tool is waiting for human validation.

gwen001 commented 1 year ago

Tool has been accepted by the team: https://offsec.tools/tool/gateway-finder-imp

Thank you for your contribution!