Mailing List Archive For pen-test@securityfocus.com Mar 2003 By Thread

• Re: Auto-Run CD - Disabling Screensavers Chris Hall (Thu Mar 13 2003 - 13:06:11 EST)
• Vulnerability scanners joe na (Fri Mar 28 2003 - 20:45:13 EST)
• Re: Vulnerability scanners Alfred Huger (Mon Mar 31 2003 - 10:51:30 EST)
• Re: Vulnerability scanners Roman Medina (Fri Mar 28 2003 - 15:59:40 EST)
• RE: Vulnerability scanners Derrick Johnson (Fri Mar 28 2003 - 11:46:26 EST)
• RE: Vulnerability scanners Paris Stone (Fri Mar 28 2003 - 11:10:06 EST)
• Gnat Box Query Disposable Acct (Fri Mar 28 2003 - 07:46:13 EST)
• Infosecuritymag Article Chris Sharp (Fri Mar 28 2003 - 14:08:00 EST)
• RE: Vulnerability scanners Rapaille Max (Fri Mar 28 2003 - 02:54:48 EST)
• Re: Vulnerability scanners Sean Knox (Fri Mar 28 2003 - 02:12:24 EST)
• Re: Vulnerability scanners Anders Thulin (Fri Mar 28 2003 - 01:58:39 EST)
• RE: Vulnerability scanners Michael Welch (Thu Mar 27 2003 - 18:46:28 EST)
• RE: Vulnerability scanners Ken Smith (Thu Mar 27 2003 - 18:38:21 EST)
• Re: Vulnerability scanners R. DuFresne (Thu Mar 27 2003 - 17:49:29 EST)
• Re: Vulnerability scanners Paris Stone (Thu Mar 27 2003 - 17:25:05 EST)
• Re: Vulnerability scanners R. DuFresne (Thu Mar 27 2003 - 18:01:42 EST)
• Re: Vulnerability scanners Nicolas Gregoire (Thu Mar 27 2003 - 17:18:53 EST)
• Re: Vulnerability scanners Alex Russell (Thu Mar 27 2003 - 16:51:45 EST)
• Re: Vulnerability scanners Chris Sharp (Thu Mar 27 2003 - 17:05:55 EST)
• RE: Vulnerability scanners Rosado, Rafael (Rafael) (Thu Mar 27 2003 - 16:46:28 EST)
• Re: Vulnerability scanners Jeff Williams (at) Aspect (Thu Mar 27 2003 - 17:02:48 EST)
• RE: Vulnerability scanners Rob Shein (Thu Mar 27 2003 - 16:31:54 EST)
• RE: Vulnerability scanners Rosado, Rafael (Rafael) (Thu Mar 27 2003 - 16:55:12 EST)
• Re: Vulnerability scanners Alvin Oga (Thu Mar 27 2003 - 16:31:10 EST)
• RE: Vulnerability scanners Ken Smith (Thu Mar 27 2003 - 16:08:00 EST)
• RE: Vulnerability scanners Rob Shein (Thu Mar 27 2003 - 15:34:05 EST)
• Re: Public implementation of birthday attack ( dns poisoning ) ? Ramon Izaguirre (Thu Mar 27 2003 - 15:09:52 EST)
• Re: Vulnerability scanners Jeff Williams (at) Aspect (Thu Mar 27 2003 - 13:58:41 EST)
• re: Odd situation, advice needed on penentration test results R. DuFresne (Thu Mar 27 2003 - 14:04:55 EST)
• Re: Vulnerability scanners oherrera (Thu Mar 27 2003 - 12:08:59 EST)
• Public implementation of birthday attack ( dns poisoning ) ? Fabio Pietrosanti (naif) (Thu Mar 27 2003 - 10:28:05 EST)
• RE: Odd situation, advice needed on penentration test results Vitaly Osipov (Thu Mar 27 2003 - 03:13:23 EST)
• Re: Odd situation, advice needed on penentration test results Desmond Irvine (Thu Mar 27 2003 - 10:08:40 EST)
• re: Odd situation, advice needed on penentration test results Desmond Irvine (Thu Mar 27 2003 - 09:09:43 EST)
• Vulnerability scanners Dan Lynch (Wed Mar 26 2003 - 18:46:32 EST)
• re: Odd situation, advice needed on penentration test results Harlan Carvey (Thu Mar 27 2003 - 09:23:26 EST)
• Re: Odd situation, advice needed on penentration test results Ido Dubrawsky (Wed Mar 26 2003 - 19:16:09 EST)
• Re: Thankyou hellNbak (Wed Mar 26 2003 - 18:15:18 EST)
• RE: Odd situation, advice needed on penentration test results Greg Reber (Wed Mar 26 2003 - 17:08:12 EST)
• Re: Odd situation, advice needed on penentration test results Raven Alder (Wed Mar 26 2003 - 17:41:59 EST)
• Thankyou saraf(at)hushmail.com (Wed Mar 26 2003 - 17:04:04 EST)
• Re: Odd situation, advice needed on penentration test results Harlan Carvey (Wed Mar 26 2003 - 17:01:44 EST)
• re: Odd situation, advice needed on penentration test results Harlan Carvey (Wed Mar 26 2003 - 15:43:53 EST)
• Re: Odd situation, advice needed on penentration test results Ido Dubrawsky (Wed Mar 26 2003 - 15:19:32 EST)
• Odd situation, advice needed on penentration test results saraf(at)hushmail.com (Wed Mar 26 2003 - 14:54:01 EST)
• Re: Net:telnet exploit Gerardo Richarte (Wed Mar 26 2003 - 09:53:43 EST)
• Dogs of Cyberwar Alfred Huger (Mon Mar 24 2003 - 14:53:10 EST)
• WebApplication assessment issue marcog(at)nettaxi.com (Mon Mar 24 2003 - 12:56:19 EST)
• Re: Net:telnet exploit Dave Aitel (Mon Mar 24 2003 - 11:36:37 EST)
• Post break-in forensics Alfred Huger (Mon Mar 24 2003 - 11:14:00 EST)
• RE: Pen Test Study Group in Mumbai Balwant Rathore (Mon Mar 24 2003 - 07:12:59 EST)
• Net:telnet exploit Gary O'leary-Steele (Sun Mar 23 2003 - 06:36:34 EST)
• Re: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability Gerardo Richarte (Fri Mar 21 2003 - 10:24:56 EST)
• RE: Network mapping oddity Eliot Mansfield (Fri Mar 21 2003 - 02:32:39 EST)
• Re: Pen testing X.25 networks Marco Ivaldi (Thu Mar 20 2003 - 17:10:07 EST)
• RE: Terminal Server brute force developemnts ? Free, Bob (Thu Mar 20 2003 - 15:38:46 EST)
• Terminal Server brute force developemnts ? Patrick MacDanel (Thu Mar 20 2003 - 15:18:30 EST)
• Network mapping oddity Yonatan Bokovza (Thu Mar 20 2003 - 13:28:42 EST)
• Microsoft Windows 2000 WebDAV buffer overflow vulnerability signature available (fwd) Alfred Huger (Thu Mar 20 2003 - 14:32:33 EST)
• Re: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability Dave Aitel (Thu Mar 20 2003 - 07:14:38 EST)
• RE : modem protective device? El Khoury (Thu Mar 20 2003 - 04:49:02 EST)
• RE : modem protective device? Bourque Daniel (Wed Mar 19 2003 - 17:11:17 EST)
• RE: modem protective device? Stephan Barnes (Wed Mar 19 2003 - 16:26:45 EST)
• modem protective device? Peter Van Epp (Wed Mar 19 2003 - 16:49:54 EST)
• Re: modem protective device? Matthew Leeds (Wed Mar 19 2003 - 16:24:10 EST)
• Summary of suggestions for a modem protection device Peter Van Epp (Wed Mar 19 2003 - 17:58:18 EST)
• Re: modem protective device? Ben Klang (Wed Mar 19 2003 - 16:09:37 EST)
• RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability Frank Knobbe (Wed Mar 19 2003 - 13:25:15 EST)
• modem protective device? Peter Van Epp (Wed Mar 19 2003 - 13:49:44 EST)
• RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability Florian Hines (Wed Mar 19 2003 - 13:11:18 EST)
• RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability Noonan, Wesley (Wed Mar 19 2003 - 12:05:34 EST)
• RE: Bluetooth Matt Moore (Wed Mar 19 2003 - 12:57:10 EST)
• RE: Bluetooth Rob Shein (Wed Mar 19 2003 - 12:44:42 EST)
• Re: Bluetooth Rus Foster (Wed Mar 19 2003 - 12:06:03 EST)
• Pen Test Study Group in Mumbai Balwant Rathore (Wed Mar 19 2003 - 05:53:35 EST)
• RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability Rob Shein (Tue Mar 18 2003 - 19:39:06 EST)
• RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability Aleksander P. Czarnowski (Wed Mar 19 2003 - 09:08:13 EST)
• Bluetooth gilles.lami(at)hays-dsia.fr (Wed Mar 19 2003 - 06:16:18 EST)
• Mystery service on tcp/205 Andrew Simmons (Wed Mar 19 2003 - 11:03:48 EST)
• RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability Royans Tharakan (Tue Mar 18 2003 - 23:02:05 EST)
• Re: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability Renaud Deraison (Tue Mar 18 2003 - 19:30:04 EST)
• RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability Curt Purdy (Tue Mar 18 2003 - 18:39:36 EST)
• RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability Royans Tharakan (Tue Mar 18 2003 - 17:38:45 EST)
• RE: command-line reverse connection tunnel? the1(at)unixclan.net (Tue Mar 18 2003 - 17:25:47 EST)
• Re: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability Nicolas Gregoire (Tue Mar 18 2003 - 15:25:36 EST)
• Re: Spike Dave Aitel (Tue Mar 18 2003 - 12:28:50 EST)
• RE: HW/SW Rogue AP Wireless Detection Joshua Wright (Tue Mar 18 2003 - 08:12:54 EST)
• strange urlscan behaviour Marco van Berkum (Tue Mar 18 2003 - 06:21:38 EST)
• Re: IMAP password cracker? Kim Nielsen (Tue Mar 18 2003 - 04:41:30 EST)
• IMAP password cracker? Oliver.Karow(at)gmx.de (Tue Mar 18 2003 - 03:22:32 EST)
• Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability Gary O'leary-Steele (Tue Mar 18 2003 - 05:05:30 EST)
• RE: command-line reverse connection tunnel? Paul Bakker (Tue Mar 18 2003 - 02:46:42 EST)
• RE: Netstumbling - FBI response Greg Reber (Mon Mar 17 2003 - 19:32:54 EST)
• Re: IMAP password cracker? Martin Eiszner (Mon Mar 17 2003 - 12:07:10 EST)
• IMAP password cracker? Gary O'leary-Steele (Mon Mar 17 2003 - 09:15:47 EST)
• IIS 5.0 problem with "backup" files in executable directories....how to enumerate them? fr0stman (Sun Mar 16 2003 - 13:19:10 EST)
• RE: command-line reverse connection tunnel? Steven Gill (Sun Mar 16 2003 - 22:26:33 EST)
• Pen testing X.25 networks patrick mooting (Sun Mar 16 2003 - 22:33:20 EST)
• RE: Password Tesing using SQL Injection Balwant Rathore (Mon Mar 17 2003 - 10:13:01 EST)
• Re: HW/SW Rogue AP Wireless Detection Reyk Floeter (Sat Mar 15 2003 - 18:44:09 EST)
• RE: command-line reverse connection tunnel? Filip Maertens (Sat Mar 15 2003 - 17:57:32 EST)
• CALEA etc. Alfred Huger (Fri Mar 14 2003 - 15:51:47 EST)
• RE: HW/SW Rogue AP Wireless Detection MILES John M (Fri Mar 14 2003 - 15:44:52 EST)
• RE: HW/SW Rogue AP Wireless Detection R. DuFresne (Fri Mar 14 2003 - 15:05:28 EST)
• RE: HW/SW Rogue AP Wireless Detection MILES John M (Fri Mar 14 2003 - 13:36:23 EST)
• Re: Aggregating vulnerability report data? Javier Fernández-Sanguino Peña (Fri Mar 14 2003 - 12:27:48 EST)
• Re: HW/SW Rogue AP Wireless Detection R. DuFresne (Fri Mar 14 2003 - 13:02:26 EST)
• Re: command-line reverse connection tunnel? Steven Gill (Fri Mar 14 2003 - 13:02:15 EST)
• RE: HW/SW Rogue AP Wireless Detection Rob Shein (Fri Mar 14 2003 - 12:02:27 EST)
• Re: HW/SW Rogue AP Wireless Detection Keith Akins (Fri Mar 14 2003 - 09:18:15 EST)
• Re: HW/SW Rogue AP Wireless Detection Mike Forrester (Thu Mar 13 2003 - 23:44:28 EST)
• Re: HW/SW Rogue AP Wireless Detection Dan Lynch (Thu Mar 13 2003 - 19:42:54 EST)
• Aggregating vulnerability report data? ahecker(at)evilscientist.com (Thu Mar 13 2003 - 18:18:11 EST)
• Re: HW/SW Rogue AP Wireless Detection David T Hollis (Thu Mar 13 2003 - 18:14:34 EST)
• Re: HW/SW Rogue AP Wireless Detection Shawn Grimes (Thu Mar 13 2003 - 16:51:11 EST)
• Firewall Firmware/IOS Bill Martin (Thu Mar 13 2003 - 16:46:13 EST)
• Re: Pen on IIS with webroot not on C Chris McNab (Thu Mar 13 2003 - 06:34:12 EST)
• Re: Pen on IIS with webroot not on C Nicolas Gregoire (Wed Mar 12 2003 - 17:47:15 EST)
• HW/SW Rogue AP Wireless Detection Gary Nugent (Wed Mar 12 2003 - 13:27:10 EST)
• Re: Pen on IIS with webroot not on C Javier Fernandez-Sanguino (Wed Mar 12 2003 - 13:15:25 EST)
• Re: Penetration Testing or Vulnerability Scanning? Ivan Arce (Wed Mar 12 2003 - 13:02:25 EST)
• Pen on IIS with webroot not on C A. Caruso (Wed Mar 12 2003 - 04:54:30 EST)
• Re: A little Help with Pen Testing My systems! miguel.dilaj(at)pharma.novartis.com (Wed Mar 12 2003 - 04:10:14 EST)
• RE: Spike Max Enders (Tue Mar 11 2003 - 17:37:28 EST)
• Spike James Paterson (Tue Mar 11 2003 - 14:14:23 EST)
• Re: Methods for evading Nmap OS Fingerprinting Cedric Blancher (Tue Mar 11 2003 - 12:03:15 EST)
• Re: Methods for evading Nmap OS Fingerprinting Jason Dixon (Tue Mar 11 2003 - 11:58:17 EST)
• pen-testing info Christian Navarrete (Tue Mar 11 2003 - 12:43:27 EST)
• RE: Bubonic DoS tool Yonatan Bokovza (Tue Mar 11 2003 - 05:09:40 EST)
• A little Help with Pen Testing My systems! mike Hughes (Mon Mar 10 2003 - 23:27:10 EST)
• Re: Penetration Testing or Vulnerability Scanning? Doug Foster (Sun Mar 09 2003 - 19:38:10 EST)
• Re: Distributed Vulnerability Scanners Preston (Mon Mar 10 2003 - 12:34:11 EST)
• Re: Methods for evading Nmap OS Fingerprinting Alex Lambert (Sun Mar 09 2003 - 17:18:13 EST)
• Re: Distributed Vulnerability Scanners spectom (Sun Mar 09 2003 - 17:17:39 EST)
• Re: AIX 5.1 diagrpt $DIAGDATADIR Jason Fortezzo (Sun Mar 09 2003 - 21:04:34 EST)
• RE: Distributed Vulnerability Scanners Ken Smith (Sun Mar 09 2003 - 15:41:59 EST)
• Re: Penetration Testing or Vulnerability Scanning? Bennett Todd (Sun Mar 09 2003 - 12:08:30 EST)
• Re: Distributed Vulnerability Scanners Talisker (Sun Mar 09 2003 - 06:46:56 EST)
• AIX 5.1 diagrpt $DIAGDATADIR Tirath Rai (Sun Mar 09 2003 - 03:23:19 EST)
• Methods for evading Nmap OS Fingerprinting David Barroso (Sun Mar 09 2003 - 07:17:06 EST)
• RE: Distributed Vulnerability Scanners Sunny Chowdhury (Fri Mar 07 2003 - 16:16:28 EST)
• RE: Penetration Testing Lab Setup - VMWare Maciolek, David (Fri Mar 07 2003 - 15:20:33 EST)
• RE: Distributed Vulnerability Scanners charl van der walt (Fri Mar 07 2003 - 15:17:32 EST)
• Re: Distributed Vulnerability Scanners Michael Murray (Fri Mar 07 2003 - 14:30:27 EST)
• RE: Penetration Testing or Vulnerability Scanning? Rob Shein (Fri Mar 07 2003 - 15:03:15 EST)
• Related news article around web vulns Alfred Huger (Fri Mar 07 2003 - 14:47:12 EST)
• Re: Distributed Vulnerability Scanners sacha.faust.bourque(at)ca.pwcglobal.com (Fri Mar 07 2003 - 11:41:30 EST)
• Re: Distributed Vulnerability Scanners Renaud Deraison (Fri Mar 07 2003 - 05:18:42 EST)
• Re: Distributed Vulnerability Scanners cdowns (Thu Mar 06 2003 - 21:55:50 EST)
• RE: Distributed Vulnerability Scanners Rapaille Max (Fri Mar 07 2003 - 02:29:58 EST)
• Penetration Testing or Vulnerability Scanning? Rizwan Ali Khan (Fri Mar 07 2003 - 01:07:35 EST)
• RE: Penetration Testing Lab Setup - VMWare disciple (Thu Mar 06 2003 - 23:56:05 EST)
• Re: X.25 tools Dragos Ruiu (Thu Mar 06 2003 - 23:37:18 EST)
• Re: Distributed Vulnerability Scanners Peter Mercer (Thu Mar 06 2003 - 22:24:41 EST)
• The netstumble thread Alfred Huger (Thu Mar 06 2003 - 20:16:16 EST)
• Re: Penetration Testing Lab Setup Jorge Lozano (Thu Mar 06 2003 - 20:17:39 EST)
• RE: Distributed Vulnerability Scanners Kohlenberg, Toby (Thu Mar 06 2003 - 18:33:38 EST)
• Re: PL/SQL web application Pete Finnigan (Thu Mar 06 2003 - 17:26:48 EST)
• RE: Distributed Vulnerability Scanners charl van der walt (Thu Mar 06 2003 - 19:01:08 EST)
• Re: Distributed Vulnerability Scanners Alex Zimin (Thu Mar 06 2003 - 18:14:28 EST)
• RE: X.25 tools Brian Brotschi (Thu Mar 06 2003 - 17:47:01 EST)
• RE: Penetration Testing Lab Setup Discussion Lists (Thu Mar 06 2003 - 13:51:04 EST)
• Re: Program for automatic attack replay Andreas Östling (Thu Mar 06 2003 - 14:00:46 EST)
• RE: Distributed Vulnerability Scanners Erik Birkholz (Thu Mar 06 2003 - 17:39:01 EST)
• RE: Program for automatic attack replay Rob Shein (Thu Mar 06 2003 - 13:44:04 EST)
• Re: Distributed Vulnerability Scanners Gideon Rasmussen, CISSP (Thu Mar 06 2003 - 14:40:56 EST)
• RE: Distributed Vulnerability Scanners Greg Reber (Thu Mar 06 2003 - 13:26:08 EST)
• Re: Penetration Testing Lab Setup Don Bailey (Thu Mar 06 2003 - 13:33:59 EST)
• RE: Netstumbling Klahn, Paul (Thu Mar 06 2003 - 12:02:22 EST)
• Program for automatic attack replay LordEidi (Thu Mar 06 2003 - 03:49:11 EST)
• Distributed Vulnerability Scanners Talisker (Wed Mar 05 2003 - 17:56:00 EST)
• RE: Netstumbling PJD(at)portcullis-security.com (Thu Mar 06 2003 - 04:24:26 EST)
• Penetration Testing Lab Setup Indian Tiger (Thu Mar 06 2003 - 01:59:11 EST)
• RE: Netstumbling Freeland, Jim (Wed Mar 05 2003 - 14:55:56 EST)
• X.25 tools Marco Ivaldi (Wed Mar 05 2003 - 15:18:08 EST)
• Re: Netstumbling Joseph W. Shaw II (Wed Mar 05 2003 - 20:21:27 EST)
• RE: Netstumbling Andrew Ruef (Wed Mar 05 2003 - 17:44:13 EST)
• Netstumbling - thanks for replies stonewall (Wed Mar 05 2003 - 16:17:39 EST)
• CansecWest Alfred Huger (Thu Mar 06 2003 - 12:15:32 EST)
• Re: Netstumbling Nick Jacobsen (Wed Mar 05 2003 - 12:11:44 EST)
• RE: Netstumbling Ken Kousky (Wed Mar 05 2003 - 12:04:06 EST)
• Re: Netstumbling IndianZ (Wed Mar 05 2003 - 12:46:11 EST)
• Netstumbling stonewall (Wed Mar 05 2003 - 09:14:44 EST)
• Re: Finding real host in Nmap -D Scans Fyodor (Tue Mar 04 2003 - 01:16:42 EST)
• Re: Finding real host in Nmap -D Scans H D Moore (Tue Mar 04 2003 - 01:02:34 EST)
• Finding real host in Nmap -D Scans Ryan (Sun Mar 02 2003 - 19:25:29 EST)