Layer 2 security is still important
Richard Bejtlich posted a few days ago about the ‘hack’ on the Metasploit webserver as reported by SunBelt. What is interesting is that the actual website wasnt compromised, but rather another system on the same VLAN at the hosting provider which then performed some ARP spoofing magic against the gateway, in effect redirecting traffic to itself.
Richard mentions some other recent hacks which can be attributed to the same technique. If you can control layer 2 why play around at layer 7? This is something that I probably need to emphasize in my upcoming Infosec course next semester.
Tags: Hacking
June 6th, 2008 at 1:54 am
[...] Layer 2 security is still important Richard mentions some other recent hacks which can be attributed to the same technique. If you can control layer 2 why play around at layer 7? This is something that I probably need to emphasize in my upcoming Infosec course next … [...]