Search:

Type: Posts; User: jmpebx; Keyword(s):

Search: Search took 0.00 seconds.

  1. Discussioni: data forencics

    by jmpebx
    Replies
    6
    Views
    2,277

    Re: data forencics

    You need to use a hardware write blocker and industry recognized software like EnCase.
  2. Re: Making undetected backdoor using netcat+vbs script,and hiding it in Adobeflash se

    Very cool video. I like it!
  3. Replies
    3
    Views
    3,219

    RIP Poisoning -- What's the 'worst case senario'?

    I've got a client where an internal scan said one of their core routers has a RIP-2 Poisoning issue.

    This is the exact Nessus description:
    Tenable Network Security

    I understand that an...
  4. Re: Procedure for dealing with hosted servers during pen-test?

    Thanks everyone.

    I guess one thing you can do is just basic non-intrusive enumeration, right?
    Things like looking for login pages, seeing if there are any version tags on the webpages themselves...
  5. Procedure for dealing with hosted servers during pen-test?

    I'm curious how everyone else handles 3rd party hosted servers when you're doing a pen-test or vulnerability assessment.
    Say you're doing a test against a company, and their email, and website are...
  6. Replies
    6
    Views
    9,258

    Re: Finding companies IP range

    Very nice. You put it a lot better than I did. I simply gave the issue with time, but I didn't add that the loss in time could be spent in other areas. I think that's what I need for them to get it....
  7. Replies
    1
    Views
    2,094

    Re: hax0r conference lockdown script

    This is a tight script! Very cool. Thanks.



    .
  8. Replies
    3
    Views
    4,207

    Re: simple update script for key pentest tools

    Cool script. Thanks!

    The only things I would maybe add would be nessus and openvas.
    If I do it, I'll post up the change.
  9. Replies
    6
    Views
    9,258

    Re: Finding companies IP range

    I actually do vulnerability assessments.
    In the past we've always asked the company to supply us with their external IPs, but the guy running the project has been learning about different...
  10. Replies
    6
    Views
    9,258

    Finding companies IP range

    How can you find a companies IP range if all you have is their domain name, and their website and email are hosted(AKA, no DNS records)?

    I know if you have 1 IP, you can do a ARPNIC whois search,...
  11. Re: Win2k3 SP1 vs MetaSploit - How many exploits can you exploit?

    NeXpose is just a vulnerability scanner right? If Nessus is showing issues, but metasploit doesn't have the exploits to attack the issues, then I don't think this would resolve the OPs problem. The...
Results 1 to 11 of 11