Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | RE: Firewalking query |
|---|---|
| Date: | Wed, 19 Oct 2005 09:40:28 +0100 (BST) |
Dear Clement & Group,
I think I haven't made myself clear. There is a
third IP address which is a Firewall (probably Cisco
PIX, from current results) that need to be assessed
apart from the PT on 2 web servers.
Now one of the servers is behind this firewall and
other I'm not able to make out the location.
On of the points that I want to express to the
client is that their firewall is a single point of
failure. If the firewall is compromised/DoS/Crashed
their one of the webserver will also not be available.
The same I cannot say for the second webserver whose
details I'm not able to trace.
The second webserver I'm not able to firewalk or
traceroute using source/destination port 80/tcp,
icmp, 53/tcp/udp, 161/udp, 69/tcp.
It would be great if i can find out the location of
second webserver.
thnks bshan
___________________________________________________________
To help you stay safe and secure online, we've developed the all new Yahoo!
Security Centre. http://uk.security.yahoo.com
------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:
Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: Recommended Web-Based Application Security Companies, Thomas Ryan |
|---|---|
| Next by Date: | Re: DB2 - SQL Injection, sf |
| Previous by Thread: | RE: Firewalking query, Hazel, Scott A. |
| Next by Thread: | Recommended Web-Based Application Security Companies, secmail . lists |
| Indexes: | [Date] [Thread] [Top] [All Lists] |