Richard Bejtlich posted a few days ago about the ‘hack’ on the Metasploit webserver as reported by SunBelt. What is interesting is that the actual website wasnt compromised, but rather another system on the same VLAN at the hosting provider which then performed some ARP spoofing magic against the gateway, in effect redirecting traffic to itself.
Richard mentions some other recent hacks which can be attributed to the same technique. If you can control layer 2 why play around at layer 7? This is something that I probably need to emphasize in my upcoming Infosec course next semester.
1 response so far ↓
1 2 Static » Blog Archive » Layer 2 security is still important // Jun 6, 2008 at 01:54
[...] Layer 2 security is still important Richard mentions some other recent hacks which can be attributed to the same technique. If you can control layer 2 why play around at layer 7? This is something that I probably need to emphasize in my upcoming Infosec course next … [...]
Leave a Comment