Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]

Pentesting a Web Applicaton behind Akamai Technology

Subject: Pentesting a Web Applicaton behind Akamai Technology
Date: 16 May 2007 13:41:54 -0000
Hi everybody,
 
I'm doing a Pentest on a Web Application for a client. The only information I 
have is the DNS name of the website. After doing the basic steps of footprint 
and enumeration, I found out that the IP adress of the website is not in the IP 
range of the client and is owned by Akamai Technology. It means that if I'm 
going on with the furter steps of pentesting, I'll pentest Akamai and not the 
"real" website of the client.
 
Is there a way to find the "real" IP address of the website ?
 
Has everyone faced this kind of configuration ?
 
For information, this is the header of the website when attempting a page that 
doesn't exist :
 
HTTP/1.0 400 Bad Request
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 186
Expires: Wed, 16 May 2007 13:39:42 GMT
Date: Wed, 16 May 2007 13:39:42 GMT
Connection: close
 
Thanks,
 
Greg

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>