Security Basics mailing list archives

Re: How to tweak tools against targets that block ICMP


From: Pen Testr <pentestr () gmail com>
Date: Tue, 20 Jul 2010 09:12:23 +0530

Better to check the documentation or tell us the tool name so we can
suggest the right.


On Tue, Jul 20, 2010 at 2:16 AM, innate one <innate1 () gmail com> wrote:
Pf can be configured a number of ways to adjust the behavior of ICMP packets, including dropping a defined percentage 
of packets to make fingerprinting the stack harder. When in doubt, check the documentation.


On Jul 19, 2010, at 1:33 PM, Adam Mooz <adam.mooz () gmail com> wrote:

If you're on a 'nix machine with iptables you could always write a
rule which blocks all outgoing ICMP packets.  Of course they could
require the results to determine how best to proceed...

----------------------------------------------------------
Adam Mooz
Website: http://www.adammooz.com




On Mon, Jul 19, 2010 at 1:28 PM, Ansgar Wiechers
<bugtraq () planetcobalt net> wrote:
On 2010-07-17 Jacky Jack wrote:
Some tools/scanners first send ICMP packet before they do their job.

So, for some hosts which block such packets, I have no idea on how to
use those tools.

How can I tweak it so that I can use it?

I refer to to the closed-source tools/scanners.

Read the documentation to find out if they provide and option to prevent
this behavior. Don't use them unless they do.

Regards
Ansgar Wiechers
--
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: