Penetration Testing mailing list archives
RE: XPSP2 compatability
From: Chris Brenton <cbrenton () chrisbrenton org>
Date: Sun, 22 Aug 2004 06:27:26 -0400
On Sat, 2004-08-21 at 17:47, Joe Smith wrote:
On Fri, 20 Aug 2004, Todd Towles wrote:So you can't inject packets with spoofed IPs in Windows? Who does that in Windows anyways...Probably not many people making an honest living.
Huh? I would guess everyone on this list that actually does pen testing for a living has had to generate spoofed IP packets quite a few times in their career. Or are you suggesting we start blindly trusting all firewall, IDS, IPS, router ACL, etc. installs by no longer testing them? Sounds like the jury is still out on how badly SP2 limits/cripples the IP stack (seems to be a number of mixed reports). If it is true, MS has severely limited its usefulness as a security testing tool. Cheers, Chris ------------------------------------------------------------------------------ Ethical Hacking at the InfoSec Institute. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. Check out our Advanced Hacking course, learn to write exploits and attack security infrastructure. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817 -------------------------------------------------------------------------------
Current thread:
- RE: XPSP2 compatability, (continued)
- RE: XPSP2 compatability Bill Burge (Aug 19)
- RE: XPSP2 compatability Corey Watts-Jones (Aug 20)
- RE: XPSP2 compatability Bill Burge (Aug 19)
- RE: XPSP2 compatability Paris E. Stone (Aug 18)
- RE: XPSP2 compatability Chris Fussell (Aug 20)
- RE: XPSP2 compatability Joe Smith (Aug 19)
- RE: XPSP2 compatability Yonatan Bokovza (Aug 19)
- RE: XPSP2 compatability Monroe, Bruce (Aug 19)
- RE: XPSP2 compatability DeGennaro, Gregory (Aug 20)
- RE: XPSP2 compatability Todd Towles (Aug 20)
- RE: XPSP2 compatability Joe Smith (Aug 22)
- RE: XPSP2 compatability Chris Brenton (Aug 22)
- RE: XPSP2 compatability Joe Smith (Aug 22)
- RE: XPSP2 compatability OBrien, Brennan (Aug 20)
- Re: XPSP2 compatability Kevin Sheldrake (Aug 21)
- Re: XPSP2 compatability Jophn Deo (Aug 22)
- Re: XPSP2 compatability Max (Aug 24)
- Re: XPSP2 compatability Kevin Sheldrake (Aug 21)
- RE: XPSP2 compatability Wozny, Scott (US - New York) (Aug 20)
- Re: XPSP2 compatability Kevin Sheldrake (Aug 21)
- Re: XPSP2 compatability Michael Richardson (Aug 24)
- Re: XPSP2 compatability Kevin Sheldrake (Aug 24)
- Re: XPSP2 compatability Michael Richardson (Aug 24)
- Re: XPSP2 compatability Kevin Sheldrake (Aug 21)