Question

A penetration tester found a network with NAC enabled. Which of the following commands can be used to bypass the NAC?

1. sslbump

2. macchanger

3. iptafcles

4. proxychains

Answer 1

The solution for the above problem is given below and if you feel any problem then feel free to ask.

Solution:-

Option B (macchanger) is correct because the command that can be used because in NAC the access to the network is given only to a set of mac addresses, and if any other user wants to access the network it will not allow that user to enter. So, by changing the mac address to one of the authenticated user of that network can help the tester/attacker to get in the network and NAC will identify the tester/attacker as that authenticated user who actually have that mac address.

Option A (sslbump) and C (iptafcles) are not correct because there is no command exist naming sslbump and iptafcles. And, if the command do not exist then it cannot be used.

And, option D (proxychains)is incorrect as it enables the user to perform any action in the network with anonymous proxy but in NAC only a set of mac address and proxies from that mac addresses are served so using proxychains will not help the tester/attacker to bypass the NAC.