Results 1 to 2 of 2

Thread: Http access via webmail account

  1. #1
    Just burned his ISO
    Join Date
    Jul 2011
    Posts
    1

    Question Http access via webmail account

    Hi Guys,

    We're in the middle of securing our webmail access, this is now just a connection over the internet towards a webserver, that webserver is then requesting username and password, however this is done over a non secure line (just http), we were wondering if it's possible to intercept the username and password while sniffering on that specific port of the webmail server? Everyone is talking about SSL and secure access trough vpn, or others. But as far as I know it's not possible to sniffer on a public webserver (eg webmail.xxx.xx) if your not on the LAN of the host or the server. So pretty secure I guess? I've seen some documents about man in the middle attacks, but again, this is when you're on the LAN of the host or server...

    Does anyone has any ideas on how to test the security of that webmail provider?
    or some great documents about that?

    thanks!

  2. #2
    Super Moderator Archangel-Amael's Avatar
    Join Date
    Jan 2010
    Location
    Somewhere
    Posts
    8,012

    Default Re: Http access via webmail account

    This has nothing to do with this forums scope.
    I would suggest you start reading RFC's (requests for comment). Also start reading about how sniffing network traffic works.
    To be successful here you should read all of the following.
    ForumRules
    ForumFAQ
    If you are new to Back|Track
    Back|Track Wiki
    Failure to do so will probably get your threads deleted or worse.

Similar Threads

  1. Replies: 0
    Last Post: 07-11-2010, 10:22 AM
  2. Account Activation
    By re_phil in forum OLD Newbie Area
    Replies: 3
    Last Post: 02-02-2009, 07:44 AM
  3. Where do I access passwords in admin account?
    By alec123 in forum OLD Newbie Area
    Replies: 7
    Last Post: 11-29-2008, 02:09 PM
  4. Facebook account
    By robjay666 in forum OLD Newbie Area
    Replies: 21
    Last Post: 10-14-2008, 03:01 PM
  5. someone trying to get into my account?
    By ats1080 in forum OLD General IT Discussion
    Replies: 14
    Last Post: 08-09-2007, 01:23 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •