[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    Re: [Full-disclosure] OT: Looking for hacker who can do
From:       Valdis.Kletnieks () vt ! edu
Date:       2006-07-30 21:20:14
Message-ID: 200607302120.k6ULKFCH031190 () turing-police ! cc ! vt ! edu
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


On Sun, 30 Jul 2006 22:28:17 +0200, Pablo Roberto Garcia said:

> I am doing a pen-test on window Machines 2003 server, I have already
> detected at least 5 services running. 80I-IS 6.0 135-RPC,3389-Ts, ProFTP,
> SMTP, VNC...etc.
> 
> It is running as File server and have different share folders.
> 
> I'd like if someone knows tool to try to exploit the vulnerabilities.
> 
> I am using Nessus for Debian Machine and as well Window Machine.
> 
> Could you give me anyone any ideas  or tricks ?

If it's a proper pen test, you should have enough info already to determine
if the machine has improper trust relationships set up.  If you don't know
what that means, you shouldn't be doing a pen test, and if you don't have
the info, you should be talking to the people that are paying you.

And if you're not on a proper pen test, note that we know where you are,
even if you're trying to hide behind a GMail account. :)

[Attachment #5 (application/pgp-signature)]

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[prev in list] [next in list] [prev in thread] [next in thread]