full-disclosure - Re: OT: Looking for hacker who can do anOutlookExpress extension library

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sun, 30 Jul 2006 17:20:14 -0400
From: Valdis.Kletnieks@...edu
To: Pablo Roberto Garcia <pabloroberto@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: OT: Looking for hacker who can do
	anOutlookExpress extension library

On Sun, 30 Jul 2006 22:28:17 +0200, Pablo Roberto Garcia said:

> I am doing a pen-test on window Machines 2003 server, I have already
> detected at least 5 services running. 80I-IS 6.0 135-RPC,3389-Ts, ProFTP,
> SMTP, VNC...etc.
> 
> It is running as File server and have different share folders.
> 
> I'd like if someone knows tool to try to exploit the vulnerabilities.
> 
> I am using Nessus for Debian Machine and as well Window Machine.
> 
> Could you give me anyone any ideas  or tricks ?

If it's a proper pen test, you should have enough info already to determine
if the machine has improper trust relationships set up.  If you don't know
what that means, you shouldn't be doing a pen test, and if you don't have
the info, you should be talking to the people that are paying you.

And if you're not on a proper pen test, note that we know where you are,
even if you're trying to hide behind a GMail account. :)

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/