RE: Website search engine is a hacking tool..

From: Vinicius Moreira Mello (vinicius_at_lineone.net)
Date: 07/30/04

  • Next message: Philippe Biondi: "Re: Testing F5 3DNS"
    Date: Thu, 29 Jul 2004 23:15:44 -0300
    To: pen-test@securityfocus.com
    
    

    Hi,

    >-- Original Message --
    >Subject: RE: Website search engine is a hacking tool..
    >From: Amal Mohammad Al Hajeri <amal@nis.etisalat.ae>
    >
    > and how can we mitigate the risk of using such techniques? did anyone
    succeed in using
    >the local search engine as a proxy to attack other targets?

    Try disabling indexing (apache: Option -Indexes) for as much directories
    as possible and not using/protecting critical files under the webserver
    (ch)root diretory.

    Regards,
    vmm.

    __________________________________________________________________
    Get Tiscali Broadband From £15:99
    http://www.tiscali.co.uk/products/broadband


  • Next message: Philippe Biondi: "Re: Testing F5 3DNS"

    Relevant Pages

    • Re: HOW MEN ARE PUT DOWN AND HOW TO GET BACK UP!
      ... > First attack non stop, ... > Wait for the victim to get angry. ... > If you study the techniques used by the Ku Klux Klan, domestic abusers, Nazis, various dictators, playground and work place ... Mothers have sons and husbands too. ...
      (soc.men)
    • Re: Obama admin is actively involved in this coverup
      ... "enhanced" interrogation techniques. ... schemes to attack tall buildings on the West Coast and buildings in New ... job is to protect Americans from another terrorist attack, ...
      (rec.gambling.poker)
    • RE: Honeypot detection and countermeasures
      ... told you that they are using a honeypot. ... unless you really want to spend all the time of the pen-test ... respond to your attack the way an exploited system would. ... Latest attack techniques. ...
      (Pen-Test)
    • Re: Everybody was kung-fu fighting
      ... Even one hit from him can possibly ... And I think that grappling isn't a distance where non-grappling ... "Wing Chun techniques are uncommitted. ... be able to "flow" easily into a following attack. ...
      (rec.martial-arts)
    • Re: Many vs Few techs, Reading the Opponent, and their wallet
      ... am constantly telling other blue belts to read the key that when ... someone's elbow crosses your centerline that is your key to attack that ... We teach a lot of techniques but hardly ever WHEN to implement said ...
      (rec.martial-arts)