You are on page 1of 16

Cng Ty TNHH T Vn & Dch V Chuyn Vit

149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

Demo tn cng DHCP Snooping

Yu cu:

DHCP Server:

- t IP cho interface ethernet 0/0


- Cu hnh cung cp dy a ch ip 172.16.10.0/24 cho mng LAN

Trn Switch:

- Cu hnh IP DHCP Snooping ngn chn tn cng DHCP server trong LAN

My Hacker:

- Chy Backtrack 5 tn cng Dos DHCP Server

My User:

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org
Cng Ty TNHH T Vn & Dch V Chuyn Vit
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

- Xin a ch t DHCP

Cu hnh trn Router DHCP

Trn Router DHCP Server ta s cu hnh mt pool cung cp a ch ip cho mng lan
172.16.10.0/24

Router#config terminal

Router(config)#host name DHCPSERVER

DHCPSERVER(config)#ip dhcp pool lan172.16.10

DHCPSERVER(dhcp-config)#network 172.16.10.0 255.255.255.0

DHCPSERVER(dhcp-config)#default-router 172.16.10.254

DHCPSERVER(dhcp-config)#dns-server 8.8.8.8

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org
Cng Ty TNHH T Vn & Dch V Chuyn Vit
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org
Cng Ty TNHH T Vn & Dch V Chuyn Vit
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

Kim tra my trm nhn ip t DHCP server

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org
Cng Ty TNHH T Vn & Dch V Chuyn Vit
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

Kim tra a ch ip m Router cp cho PC

Cu hnh trn Backtrack 5

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org
Cng Ty TNHH T Vn & Dch V Chuyn Vit
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

Ti y s dng lnh yersinia G m cng c yersinia

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org
Cng Ty TNHH T Vn & Dch V Chuyn Vit
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

Giao din xut hin bn s chn tab DHCP hoc mt trong cc giao thc khc m bn
cn Dos (tn cng)

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org
Cng Ty TNHH T Vn & Dch V Chuyn Vit
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org
Cng Ty TNHH T Vn & Dch V Chuyn Vit
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

Tip theo bn chn launch attack

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org
Cng Ty TNHH T Vn & Dch V Chuyn Vit
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

Tn cng DHCP server bn s chn option th 2 gi gi tin Disover packet

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org
Cng Ty TNHH T Vn & Dch V Chuyn Vit
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

Kim tra trn DHCP server

Router bo log trn cng ethernet 0/0

Kim tra dy a ch IP trn DHCP Server

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org
Cng Ty TNHH T Vn & Dch V Chuyn Vit
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org
Cng Ty TNHH T Vn & Dch V Chuyn Vit
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

Ta thy dy a ch IP t 172.16.10.1 -172.16.10.253 c dng ht bi my tnh


hacker.

Trn switch ta s dng cu lnh show mac-aadresstable kim tra bng mac address
ca switch. Ta thy cng F0/4 xin mac lin tc cho n khi no bng mac y th s xy
ra hin tng trn bng mac- address.

Cu hnh chn cc cuc tn vo Switch nh sau:

- Trc tin ta xc nh cu hnh IP snooping trn vlan no


- Cu hnh cng DHCP server l cng trust

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org
Cng Ty TNHH T Vn & Dch V Chuyn Vit
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

Kim tra DHCP Snooping trn switch

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org
Cng Ty TNHH T Vn & Dch V Chuyn Vit
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

Cu hnh gii hn mac-address cho cc cng cn li

Sau khi cu hnh chn cc cuc tn cng trn cng ta kim tra trn switch

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org
Cng Ty TNHH T Vn & Dch V Chuyn Vit
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, TP. HCM
in Thoi : 08 351 24257 (5 lines) Fax: (08) 35124314
Website: http://vnpro.vn Support Forum: http://vnpro.org

By gi thc hin tn cng li DHCP server khi cu hnh trust cng gn DHCP v gii
hn mac- address ti cc cng (theo cc bc tn cng bng bactrack 5)

Switch thng bo log v ng thi Switch s tt cng F0/4 m hacker ang cm my tnh
vo tn cng Swicth

Nguyn Trng Giang


Email: nguyentrunggiang@vnpro.org

You might also like