pen-test
[Top] [All Lists]

Re: Discovering Live Hosts

To: pentest <pen-test@securityfocus.com>
Subject: Re: Discovering Live Hosts
From: Dan Catalin Vasile <hardware_cta@yahoo.com>
Date: Wed, 8 Aug 2007 01:02:24 -0700 (PDT)
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; b=cKr4vzwPyRrBw1yY4jspnKTX0o71oldlqCd7SzrnArlhbvQcLYw4LQw5n6QVqE9LDXBLKXXidIc2CKVDYj6PAqE149dAX2E6VjpvHgYIAvYR9NbuseOyKFo9rM/y69Y2IFIeRtEFjtWPLoad97ngBLy4C92Ue928Zx5uzl6r87I=;
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
Resent-date: Wed, 8 Aug 2007 01:28:27 -0600 (MDT)
Resent-from: pen-test-return-1078484779@securityfocus.com
Resent-message-id: <20070808072827.CAA8D161BBF@outgoing2.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
Note: forwarded message attached.



      
____________________________________________________________________________________
Fussy? Opinionated? Impossible to please? Perfect.  Join Yahoo!'s user panel 
and lay it on us. http://surveylink.yahoo.com/gmrs/yahoo_panel_invite.asp?a=7 
--- Begin Message ---
To: rajat swarup <rajats@gmail.com>
Subject: Re: Discovering Live Hosts
From: Dan Catalin Vasile <hardware_cta@yahoo.com>
Date: Tue, 7 Aug 2007 23:54:57 -0700 (PDT)
In-reply-to: <7d04ec560708072314o62708ae8y18f1072ae739337b@mail.gmail.com>
--- rajat swarup <rajats@gmail.com> wrote:

> On 8/8/07, Nikhil Wagholikar <visitnikhil@gmail.com>
> wrote:
> >
> > Thanks for your suggestion. However as I said
> earlier that "if suppose SMTP is
> > configured on port 26 instead of traditional port
> 25, then it would
> > add a twist to this situation". Hence your
> suggested method would
> > still leave some hosts down. Can you kindly
> further granularize your
> > suggestion?
> 



> But it would turn up with port 25 as "closed" which
> still shows that
> the host is alive.


Or not! The fw can be configured not to respond in
case that a port is closed. In this situation nmap
reports the port as "filtered" and you can't tell if
the host is up. In fact, a live host with no ports
open and with a fw configured to reject icmp can
appear as offline.





> -- 
> Rajat Swarup
> 
> http://rajatswarup.blogspot.com/
> 
>
------------------------------------------------------------------------
> This list is sponsored by: Cenzic
> 
> Need to secure your web apps NOW?
> Cenzic finds more, "real" vulnerabilities fast.
> Click to try it, buy it or download a solution FREE
> today!
> 
> http://www.cenzic.com/downloads
>
------------------------------------------------------------------------
> 
> 



       
____________________________________________________________________________________
Be a better Globetrotter. Get better travel answers from someone who knows. 
Yahoo! Answers - Check it out.
http://answers.yahoo.com/dir/?link=list&sid=396545469


--- End Message ---
------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------
<Prev in Thread] Current Thread [Next in Thread>