pen-test
[Top] [All Lists]

Re: Pentesting Openmail Web login

To: Tremaine Lea <pen-test@ddiction.com>
Subject: Re: Pentesting Openmail Web login
From: "R. DuFresne" <dufresne@sysinfo.com>
Date: Mon, 18 Jun 2007 14:51:05 -0400 (EDT)
Cc: s-williams@nyc.rr.com, listbounce@securityfocus.com, "pen-test@securityfocus.com" <pen-test@securityfocus.com>, pen-test-return-1078484240@securityfocus.com
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
In-reply-to: <E1E2BAF1-69D7-4311-BAFC-8E756AF5D22E@ddiction.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
Organization: sysinfo.com
References: <679373278-1179969881-cardhu_blackberry.rim.net-1262565111-@bxe047-cell01.bisx.prod.on.blackberry> <E1E2BAF1-69D7-4311-BAFC-8E756AF5D22E@ddiction.com>
Resent-date: Mon, 18 Jun 2007 20:48:01 -0600 (MDT)
Resent-from: pen-test-return-1078484388@securityfocus.com
Resent-message-id: <20070619024801.2436F237544@outgoing3.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



I gewt the impression he is asking about tools to test the strength of passwrds for the users accounts for mail. And this is an area he should beable to search the archives for, since it seems to be covered here about 3-4 times a year, much like the comparative questions about various tools threads.

Thanks,

Ron DuFresne


On Wed, 23 May 2007, Tremaine Lea wrote:

I'd recommend Nessus. It has plugins specifically for this type of thing and is definitely capable of a variety of brute force attacks.


On 23-May-07, at 7:26 PM, s-williams@nyc.rr.com wrote:

Anyone have a good tool in mine?
------Original Message------
To: listbounce@securityfocus.com
To: pen-test@securityfocus.com
Sent: May 23, 2007 12:01 PM
Subject: Pentesting Openmail Web login

I am task with testing user accounts on our mail system. We currently have two systems Exchange, and OpenMail for Linux which is on the DMZ. We are interested in finding out how easy it might be for someone to guess the password of one or our users account.

And if the are sucessful what can the do on the linux box, with that username and password.

We have a main site with a link to the webmail system from there, ifi want to test this which tool might be the best for doing this since its a link and not the main page?

Thanks in advance

"A wise man ask questions, a fool is afraid of knowledge"

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------





------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------

- -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        admin & senior security consultant:  sysinfo.com
                        http://sysinfo.com
Key fingerprint = 9401 4B13 B918 164C 647A  E838 B2DF AFCC 94B0 6629

...We waste time looking for the perfect lover
instead of creating the perfect love.

                -Tom Robbins <Still Life With Woodpecker>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFGdtQdst+vzJSwZikRAoQbAJ419Jh6YWYoUCzwHwTtV0rUEELYuACdFUNm
o8y5pxnkVFkLP5ypyvtsFSs=
=aE7R
-----END PGP SIGNATURE-----

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>
  • Re: Pentesting Openmail Web login, R. DuFresne <=