Re: Hacking Demo and Test Lab

From: s b (skullrockz_at_yahoo.com)
Date: 06/15/04

  • Next message: Pete Finnigan: "new paper on accessing Oracle SGA directly in C" 
    Date: Tue, 15 Jun 2004 07:30:08 -0700 (PDT)
To: psisca@cisiar.org, raza@raza.demon.co.uk, pen-test@securityfocus.com

    Check out this paper published by CERT India

    Securing Redhat 9.0 as a web server
     
    http://www.cert-in.org.in/guidelines/CISG-2004-01.pdf
     
    Seems Interesting
     
    Cheers
     

    --- Pablo Sisca <psisca@cisiar.org> wrote:
    > Hiya Raza:
    >
    > You must disable the bridge in VMware. Because, if
    > not NC and NMAP
    > doesn´t work properly in XP´s BOX. I had same
    > problems showing both
    > things in a course. Just look at the net conf in the
    > VMware.
    >
    > Hope, it can helpful!!!
    >
    > Pablo Sisca
    >
    >
    > On 11 Jun 2004 11:41:50 -0000, raza sharif wrote:
    > >
    > >
    > > Hi Folks ,
    > >
    > >
    > > Im doing some advanced Hacking Demos for
    > management and also
    > > Corporates etc.
    > >
    > >
    > > I have a installed windows 2000 server and iis 5.0
    > on VMWARE GSX
    > > server.
    > >
    > >
    > > Im using Webdav and other exploits that all
    > basically should spawn
    > > a shell using netcat.
    > >
    > >
    > > Im using XP as my attacking machine.
    > >
    > >
    > > Prob at the moment is Netcat will not spawn a
    > shell regardless of
    > > what i try.
    > >
    > >
    > > Any ideas ? i checked the install it is windows
    > 2000 500.1295 no
    > > reference to service packs etc. it's a default
    > install.
    > >
    > >
    > > Also what are good demo's etc to run to show real
    > hacking on
    > > windows 2000 , iis etc..that i can get to work
    > >
    > >
    > > thanks
    > >
    > >
    > > Raza
    > >
    > >
    > > Raza@raza.demon.co.uk
    >
    >

                    
    __________________________________
    Do you Yahoo!?
    Yahoo! Mail - Helps protect you from nasty viruses.
    http://promotions.yahoo.com/new_mail

  • Next message: Pete Finnigan: "new paper on accessing Oracle SGA directly in C"
    • Quantcast