Penetration Testing mailing list archives

Re: Auditing asterisk servers?


From: "Adriel T. Desautels" <ad_lists () netragard com>
Date: Tue, 10 Feb 2009 13:38:18 -0500

It all depends on the servers status and how critical it is to the business. Other than that, they should be tested for what they are. Why would you test an asterisk server like a web server? You wouldn't do that, does that make sense? ;)


On Feb 9, 2009, at 11:22 AM, Camilo Olea wrote:

Hi List,

I just wanted to know if there are any special tools and/or guidelines to follow for auditing the security of an asterisk server. Or do they get treated like any other server and I should audit them like so?

Thanks in advance,
Camilo




La informacion de este correo es de caracter CONFIDENCIAL y PRIVADO y es propiedad de GRUPO SUNSET. La privacidad de esta comunicacion goza de proteccion legal. Cualquier revision, retransmision, difusion o cualquier otro uso de este correo, por personas o entidades distintas a las del destinatario legitimo, queda expresamente prohibida. Si usted ha recibido este mensaje por error, por favor avise inmediatamente al remitente contestando y eliminando este correo. Las opiniones incluidas son del remitente, y no necesariamente reflejan la opinion de GRUPO SUNSET. Este correo electronico no pretende ni debe ser considerado como constitutivo de ninguna relacion legal, contractual o de otra indole similar. No puede garantizarse que las comunicaciones de Internet sean seguras, libres de error o virus. Por lo tanto GRUPO SUNSET, no acepta responsabilidad alguna. The contents of this email are CONFIDENTIAL and PRIVATE in nature, and remain the property of SUNSET GROUP. The privacy of this email is protected by law. Any revision, forwarding, distribution or any other use of this email, for persons or entities other than the legitimate addressee, is forbidden. If you have received this message by mistake, please alert the sender immediately by responding to and then eliminating this email. The opinions expressed in this email are those of the sender, and may not necessarily reflect the opinions of SUNSET GROUP. This email does not constitute, nor should it be considered as confirmation of any legal, contractual, or any other relationship. Internet communications cannot be guaranteed to be secure or error-free, as information could be intercepted, corrupted, lost, arrive late or contain viruses. SUNSET GROUP does not accept liability for any errors or omissions in the context of this message which could arise as a result of Internet
transmission.





        Adriel T. Desautels
        ad_lists () netragard com
        --------------------------------------

        Subscribe to our blog
        http://snosoft.blogspot.com




Current thread: