Penetration Testing mailing list archives

Re: LAN pen test


From: anonymouse () anonymous com
Date: 5 Dec 2006 13:46:00 -0000

Just because a machine is current on windows updates doesn't mean that it's not vulnerable.  Is it just a workstation 
or is it some type of server?  What other applications are installed on the machine, and are they vulnerable?  What 
about the other devices on the LAN (such as the router, is it patched)?  What is your method of reconnaissance and 
enumeration?  It also depends on what type of attack you’re attempting (application layer, network layer?).  You can’t 
rely on a security scanner to do all of your work.

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


Current thread: