Mailing List Archive For pen-test@securityfocus.com Apr 2003 By Thread

• Disco - Passive IP Discovery Preston (Wed Apr 30 2003 - 21:44:58 EDT)
• re: Project anj (Wed Apr 30 2003 - 18:32:50 EDT)
• RE: project Rob Shein (Wed Apr 30 2003 - 22:08:36 EDT)
• Re: project Ido Dubrawsky (Wed Apr 30 2003 - 16:21:45 EDT)
• Re: project David Pick (Wed Apr 30 2003 - 12:36:55 EDT)
• WebService pentest tool raymond (Wed Apr 30 2003 - 02:56:34 EDT)
• Re: internal IP address revealed by e-mail Chris McNab (Tue Apr 29 2003 - 15:00:00 EDT)
• RE: internal IP address revealed by e-mail Yonatan Bokovza (Wed Apr 30 2003 - 04:46:37 EDT)
• re: Scanning for Trojans anj (Tue Apr 29 2003 - 15:36:33 EDT)
• Enumerating housts behind NAT Barry Irwin (Wed Apr 30 2003 - 03:27:09 EDT)
• Re: Port Scanners / Sniffers Review Philippe Biondi (Wed Apr 30 2003 - 05:34:15 EDT)
• project ashwini ajjappa (Tue Apr 29 2003 - 12:00:46 EDT)
• internal IP address revealed by e-mail Vel (Mon Apr 28 2003 - 11:06:53 EDT)
• RE: Scanning for trojans Discussion Lists (Tue Apr 29 2003 - 10:07:55 EDT)
• RE: Scanning for trojans Rob Shein (Mon Apr 28 2003 - 18:55:30 EDT)
• Re: pen-testing an information kiosk (breaking out of the application) alaric(at)alaricsecurity.com (Mon Apr 28 2003 - 22:34:13 EDT)
• Re: Scanning for trojans cdowns (Mon Apr 28 2003 - 18:10:35 EDT)
• RE: Port Scanners / Sniffers Review Pete Herzog (Mon Apr 28 2003 - 17:35:41 EDT)
• RE: Scanning for trojans Discussion Lists (Mon Apr 28 2003 - 18:05:49 EDT)
• Re: Scanning for trojans Eric (Mon Apr 28 2003 - 17:25:49 EDT)
• RE: Port Scanners / Sniffers Review Devilscrow Sr (Mon Apr 28 2003 - 07:16:46 EDT)
• Scanning for trojans Discussion Lists (Sun Apr 27 2003 - 13:19:34 EDT)
• Re: Port Scanners / Sniffers Review Paul Vlissidis (Fri Apr 25 2003 - 17:46:18 EDT)
• Re: Proof of Concept Tool on Web Application Security Jörg Schütter (Sun Apr 27 2003 - 09:04:48 EDT)
• @stake WebProxy 2.1 new release Chris Wysopal (Fri Apr 25 2003 - 11:45:05 EDT)
• Re: pen-testing an information kiosk (breaking out of the application) Mark Reardon (Fri Apr 25 2003 - 08:35:46 EDT)
• For Indian Tiger - Pen test lab Sam (Fri Apr 25 2003 - 03:26:32 EDT)
• Re: Port Scanners / Sniffers Review Mary-RR (Thu Apr 24 2003 - 13:26:01 EDT)
• Re: Port Scanners / Sniffers Review cdowns (Thu Apr 24 2003 - 13:49:38 EDT)
• RE: LC4 (L0phtCrack) error "Couldn't open SAM\Domains\Account\Users in SAM file. Possibly improper format." Damage (Mon Apr 21 2003 - 18:02:38 EDT)
• Port Scanners / Sniffers Review Sam (Mon Apr 21 2003 - 02:17:03 EDT)
• RE: SQL njection 2 Calderon, Juan C (CORP, DDEMESIS) (Mon Apr 21 2003 - 14:06:20 EDT)
• nmap 3.20 statistics patch sigtrap (Tue Apr 22 2003 - 18:32:35 EDT)
• @stake port announcement: ncpquery for win32 now posted to razor.bindview.com Ollie Whitehouse (Mon Apr 21 2003 - 19:07:55 EDT)
• RE: Proof of Concept Tool on Web Application Security Indian Tiger (Wed Apr 23 2003 - 03:20:54 EDT)
• Demo of WebDAV exploit with Trojan installation Brian Serra (Wed Apr 23 2003 - 23:04:18 EDT)
• pen-testing an information kiosk (breaking out of the application) bugtraq(at)oechslin.net (Wed Apr 23 2003 - 05:16:01 EDT)
• RE: LC4 (L0phtCrack) error "Couldn't open SAM\Domains\Account\Users in SAM file. Possibly improper format." Christopher W. Morris (Thu Apr 17 2003 - 15:54:38 EDT)
• Re: LC4 (L0phtCrack) error "Couldn't open SAM\Domains\Account\Users in SAM file. Possibly improper format." Chris McNab (Thu Apr 17 2003 - 13:42:46 EDT)
• RE: False-negatives in several Vulnerability Assessment tools Craig H. Rowland (Thu Apr 17 2003 - 13:28:43 EDT)
• Re: False-negatives in several Vulnerability Assessment tools Jimi Thompson (Wed Apr 16 2003 - 20:53:25 EDT)
• RE: LC4 (L0phtCrack) error "Couldn't open SAM\Domains\Account\Use rs in SAM file. Possibly improper format." MACRIDES,NATHAN (HP-Australia,ex3) (Wed Apr 16 2003 - 20:24:25 EDT)
• Re: Strange service on Port 5656 H Carvey (Thu Apr 17 2003 - 10:08:37 EDT)
• Re: TR: Strange service on Port 5656 Thierry Bole (Thu Apr 17 2003 - 06:13:34 EDT)
• Re: Strange service on Port 5656 Neal K. Groothuis (Wed Apr 16 2003 - 18:20:37 EDT)
• Re: Strange service on Port 5656 Craig Holmes (Wed Apr 16 2003 - 16:35:02 EDT)
• Strange service on Port 5656 B F (Wed Apr 16 2003 - 13:19:26 EDT)
• Re: False-negatives in several Vulnerability Assessment tools R. DuFresne (Wed Apr 16 2003 - 12:03:46 EDT)
• RE: Proof of Concept Tool on Web Application Security Dawes, Rogan (ZA - Johannesburg) (Wed Apr 16 2003 - 11:53:35 EDT)
• Re: False-negatives in several Vulnerability Assessment tools Muhammad Faisal Rauf Danka (Wed Apr 16 2003 - 02:10:57 EDT)
• need some ipass - help Kroma Pierre (Wed Apr 16 2003 - 08:28:43 EDT)
• Re: Proof of Concept Tool on Web Application Security Jon Pastore (Wed Apr 16 2003 - 07:10:13 EDT)
• LC4 (L0phtCrack) error "Couldn't open SAM\Domains\Account\Users in SAM file. Possibly improper format." flexicon33(at)yahoo.com (Wed Apr 16 2003 - 00:24:31 EDT)
• Re: Defeating nmap fingerprinting on OpenBSD Jonas Eriksson (Mon Apr 14 2003 - 16:10:32 EDT)
• Defeating nmap fingerprinting on OpenBSD per(at)same.net (Mon Apr 14 2003 - 15:17:19 EDT)
• RE: Proof of Concept Tool on Web Application Security Robert Auger (Mon Apr 14 2003 - 11:12:52 EDT)
• RE: Proof of Concept Tool on Web Application Security Nicolas Gregoire (Mon Apr 14 2003 - 11:23:31 EDT)
• RE: Proof of Concept Tool on Web Application Security Dawes, Rogan (ZA - Johannesburg) (Mon Apr 14 2003 - 01:45:15 EDT)
• RE: Proof of Concept Tool on Web Application Security Indian Tiger (Sun Apr 13 2003 - 03:33:12 EDT)
• Re: connect-back win32 shellcode Mhal (Sat Apr 12 2003 - 08:04:16 EDT)
• Re: BIND/DNS Version check Sebastian Jaenicke (Fri Apr 11 2003 - 13:47:10 EDT)
• Testing Cross-Site Scripting to Inject and run malicious code Indian Tiger (Sat Apr 12 2003 - 11:41:45 EDT)
• Re: BIND/DNS Version check Nexus (Fri Apr 11 2003 - 13:43:02 EDT)
• Re: BIND/DNS Version check Muhammad Faisal Rauf Danka (Fri Apr 11 2003 - 14:49:38 EDT)
• Re: BIND/DNS Version check sysadmin(at)wvths.com (Fri Apr 11 2003 - 13:41:11 EDT)
• Re: BIND/DNS Version check Rus Foster (Fri Apr 11 2003 - 13:33:26 EDT)
• RE: Proof of Concept Tool on Web Application Security Dawes, Rogan (ZA - Johannesburg) (Fri Apr 11 2003 - 03:11:45 EDT)
• RE: Firewall Testing Software Matt Foster (Fri Apr 11 2003 - 11:05:31 EDT)
• Re: http fingerprinting shawnmer (Thu Apr 10 2003 - 18:42:56 EDT)
• BIND/DNS Version check Asim Shaikh (Thu Apr 10 2003 - 21:39:44 EDT)
• RE: Proof of Concept Tool on Web Application Security Einecker, Leah (Thu Apr 10 2003 - 17:56:43 EDT)
• IPv4 - mapped address considered harmful Eduardo Segura (Thu Apr 10 2003 - 09:39:22 EDT)
• RE: http fingerprinting Dieter Sarrazyn (Thu Apr 10 2003 - 05:41:24 EDT)
• Re: Firewall Testing Software defaillance(at)hushmail.com (Thu Apr 10 2003 - 09:02:43 EDT)
• Re: http fingerprinting Nicolas Gregoire (Thu Apr 10 2003 - 04:47:51 EDT)
• Re: Firewall Testing Software Volker Tanger (Thu Apr 10 2003 - 03:30:33 EDT)
• Re: http fingerprinting Wojciech Pawlikowski (Thu Apr 10 2003 - 07:58:30 EDT)
• Proof of Concept Tool on Web Application Security Indian Tiger (Tue Apr 15 2003 - 14:05:34 EDT)
• AW: Apache Chunk Code Files Sven Scherler (Thu Apr 10 2003 - 05:31:41 EDT)
• Re: Firewall Testing Software alaric(at)alaricsecurity.com (Thu Apr 10 2003 - 01:43:52 EDT)
• Re: Firewall Testing Software Nicolas Gregoire (Thu Apr 10 2003 - 04:38:10 EDT)
• Re: Firewall Testing Software ph1zzle (Wed Apr 09 2003 - 20:49:24 EDT)
• Re: http fingerprinting Franck Veysset (Thu Apr 10 2003 - 02:48:43 EDT)
• Re: Firewall Testing Software Alvin Oga (Wed Apr 09 2003 - 21:13:24 EDT)
• Re: http fingerprinting Eric Haugh (Wed Apr 09 2003 - 20:50:25 EDT)
• Re: Firewall Testing Software Chris Reining (Wed Apr 09 2003 - 20:47:36 EDT)
• Re: http fingerprinting Bill Pennington (Wed Apr 09 2003 - 20:51:13 EDT)
• connect-back win32 shellcode wirepair (Wed Apr 09 2003 - 13:10:56 EDT)
• Firewall Testing Software Colin Greg (Wed Apr 09 2003 - 18:07:23 EDT)
• Re:65 Oracle security papers, articles and presentations jmig(at)mail.gr (Wed Apr 09 2003 - 11:57:01 EDT)
• Re: Apache Chunk Code Files ph1zzle (Wed Apr 09 2003 - 10:14:40 EDT)
• http fingerprinting Rick Hoekman (Tue Apr 08 2003 - 20:57:26 EDT)
• RE: Traceroute Question Laurent Kempenaar (Tue Apr 08 2003 - 03:23:53 EDT)
• RE: Top 10 vulnerabilities and open ports. Alex Zimin (Tue Apr 08 2003 - 02:16:18 EDT)
• RE: Top 10 vulnerabilities and open ports. Kevin Hodle (Mon Apr 07 2003 - 21:19:38 EDT)
• Re: Traceroute Question oherrera (Mon Apr 07 2003 - 19:52:02 EDT)
• 65 Oracle security papers, articles and presentations Pete Finnigan (Mon Apr 07 2003 - 12:28:44 EDT)
• RE: Traceroute Question Jorge Coll (Mon Apr 07 2003 - 11:22:16 EDT)
• RE: Traceroute Question Yonatan Bokovza (Mon Apr 07 2003 - 11:09:17 EDT)
• RE: Traceroute Question Weaver, Woody (Mon Apr 07 2003 - 11:25:14 EDT)
• False-negatives in several Vulnerability Assessment tools Nicolas Gregoire (Mon Apr 07 2003 - 06:05:27 EDT)
• Traceroute Question Vineet Mehta (Mon Apr 07 2003 - 05:19:35 EDT)
• Re: Concurrent Sessions and User Feedback Anders Thulin (Mon Apr 07 2003 - 02:43:12 EDT)
• Re: Concurrent Sessions and User Feedback Daniel Staal (Sun Apr 06 2003 - 20:15:17 EDT)
• Re: Pen-Testing VPN Matthew Franz (Sun Apr 06 2003 - 19:49:46 EDT)
• Re: Concurrent Sessions and User Feedback Chris Saulnier (Sun Apr 06 2003 - 18:18:59 EDT)
• RE: Concurrent Sessions and User Feedback Rob Shein (Sun Apr 06 2003 - 17:55:03 EDT)
• Top 10 vulnerabilities and open ports. Alex Zimin (Sun Apr 06 2003 - 09:15:01 EDT)
• Concurrent Sessions and User Feedback Susan Olson (Sat Apr 05 2003 - 14:33:20 EST)
• RE: Pen-Testing VPN Eric Hines (Fri Apr 04 2003 - 16:06:50 EST)
• Security Training Andy Cuff [talisker] (Fri Apr 04 2003 - 14:46:37 EST)
• Re: Apache Chunk Code Files Nexus (Sat Apr 05 2003 - 05:43:03 EST)
• Re: Apache Chunk Code Files Muhammad Faisal Rauf Danka (Fri Apr 04 2003 - 13:39:41 EST)
• Apache Chunk Code Files Asim Shaikh (Thu Apr 03 2003 - 18:21:37 EST)
• RE: Pen-Testing VPN Lambott(at)aol.com (Thu Apr 03 2003 - 15:40:33 EST)
• Re: Pen-Testing VPN Peter Van Epp (Thu Apr 03 2003 - 15:33:18 EST)
• RE: Pen-Testing VPN Rob Shein (Thu Apr 03 2003 - 14:30:56 EST)
• Pen-Testing VPN Darren Beattie (Thu Apr 03 2003 - 13:43:23 EST)
• U.S. Information Security Law, Part 2 Alfred Huger (Tue Apr 01 2003 - 12:25:03 EST)