Security Basics mailing list archives
Re: Finding other websites for pen-testing...
From: "Meritt James" <meritt_james () bah com>
Date: Thu, 02 Oct 2003 09:36:29 -0400
You may wish to check the archives at security focus for the mailing list pen-test () securityfocus com, which is specifically concerned with penetration testing. David Burt wrote:
Say you know that name of the company you have been hired by to perform a pen-test. You know their main website. You want to find out what other website that they may have on different webservers that maybe in house rather than being outsourced like their main website or maybe they run a website that isn't as high profile so they are pretty lax on keeping it updated. If you go to netsol.com and do a whois on their main website you can find out their address and all the main contacts. Is there a way to search this information to find all the domains that have the same contacts in them or maybe the same address? __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com --------------------------------------------------------------------------- ----------------------------------------------------------------------------
-- James W. Meritt CISSP, CISA Booz | Allen | Hamilton phone: (410) 684-6566 --------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- RE: Finding other websites for pen-testing... Meidinger Chris (Oct 01)
- <Possible follow-ups>
- Re: Finding other websites for pen-testing... George Ellenburg (Oct 01)
- Re: Finding other websites for pen-testing... Meritt James (Oct 02)