Re: snmp

From: Frank Knobbe (frank_at_knobbe.us)
Date: 09/28/04

  • Next message: Jose Maria Lopez: "Re: Re:snmp" 
    To: "R. DuFresne" <dufresne@sysinfo.com>
Date: Mon, 27 Sep 2004 17:19:14 -0500

    On Fri, 2004-09-24 at 15:39, R. DuFresne wrote:
    > You start by getting yer "get out of jail free card" from mgt. If you
    > lack that, you are likely to get fired and then prosecuted.

    I didn't read it like you did. It seemed to me that Juan wanted a tool
    that lists some info retrieved via SNMP Gets. With that list we would
    approach management, showing that you can query interface tables, etc,
    with a community string of "public".

    I didn't think that he wanted to "break into" and systems, or otherwise
    "pentest" it (even though he used that word in his request. Improper use
    of "pentest" in my book).

    I don't think he needs management approval or a JOOJF card to just list
    some stuff with snmpwalk. After all, the information is "public", right?

    As long as he doesn't circumvent counter-measures he should be fine.
    After all, he is the one responsible for security in his company. He
    would be one handing out the JOOJF cards ;)

    Cheers,
    Frank

  • Next message: Jose Maria Lopez: "Re: Re:snmp"

    Relevant Pages

    • SAP Pentest
      ... We have a pentest to do over an SAP application using the following ... Other mailing lists? ... Download FREE whitepaper on how a managed service can ...
      (Pen-Test)
    • Re: [Full-Disclosure] Immature blabla / cisco exploit
      ... DuFresne - is that French? ... nor shall I expect you to use the word email in your emails. ... booger at night - I'm the security snot." ... > here, and perhaps so on a few of the other sec lists too, having been ...
      (Full-Disclosure)