Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security SecProg
[Top] [All Lists]

Re: php - inject code into $_SERVER ?

Subject: Re: php - inject code into $_SERVER ?
Date: Tue, 08 Feb 2005 07:26:30 +0100
Dave Hull wrote:

We have developed a solution that hopefully will be open sourced in
the next few months. In a nutshell, we have a DHCP server that assigns
non-routable (10.10.x.x) IP addresses to unknown hosts on the network.
These hosts are redirected to a local authentication server via a
simple DNS hack that redirects all requests to a host of our choosing.

Once users have downloaded an application to their local machine and
we have verified they are fully patched and are pulling updates for
both OS and anti-virus software, we assign them a routable IP for our
primary network and they are free to go whereever they want.

There are some problems that we have solutions for, but are still
implementing, like what to do for people who hard-code a routable IP
address on their machines, etc.

I'm sure our solution is not novel, I've seen captive portals in
coffee shops that provide the same functionality.


Thanks for all answers regarding this subject. :)

The use area for something like this will be at a lanparty - it would be really great to finally put an end to all the virii. I guess i'll do some serious thinking and testing. Any other pointers/tips are very welcome :)

Regards
Ole Martin Eide

<Prev in Thread] Current Thread [Next in Thread>