Re: pen test VPN

From: Mark Rowe (mark@whatnot.demon.co.uk)
Date: 02/27/02

Previous message: Ollie Whitehouse: "Tool Announcement: WAP Assessment Toolkit"
In reply to: Carl Bysen: "pen test VPN"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Wed, 27 Feb 2002 15:42:18 +0000
To: PEN-TEST@securityfocus.com
From: Mark Rowe <mark@whatnot.demon.co.uk>

You may also want to pen test the VPN client. Often these are
unprotected and they provide a much easier route to the internal network
than the VPN gateway.

In article <20020223162525.67195.qmail@mail.com>, Carl Bysen
<crbyme@writeme.com> writes
>Hi,
>
>what can be done to pen test a VPN setup? Which tools are available,
>additionally does it make sense to pen-test a VPN setup (traffic is encrypted)?
>
>
>Regards,
>--egonle

-- Mark Rowe IT Security Consultant PenTest Limited

Office +44 (0)1565 830990 Fax +44 (0)1565 830889 Mobile +44 (0)7813 803929

mark.rowe@pentest-limited.com

www.pentest-limited.com

---------------------------------------------------------------------------- This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service. For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/

Previous message: Ollie Whitehouse: "Tool Announcement: WAP Assessment Toolkit"
In reply to: Carl Bysen: "pen test VPN"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

Re: pen test VPN
... > what can be done to pen test a VPN setup? ... basic buffer overflow in the ... This list is provided by the SecurityFocus Security Intelligence Alert ...
(Pen-Test)
RE: pen test VPN
... > We all know that VPN does nothing more then encrypt Data. ... It is also very important to identify all points where encrypted data is ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
(Pen-Test)
Re: SQL
... | I am doing a pen test against a IIS 5 web server. ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
(Pen-Test)
Password HTML form bruteforce
... I am currently involved in a pen test on a website ... A capture of an unsuccessfull capture looks like this: ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
(Pen-Test)