Re: Identifying whether 2 IPs are from the same server

From: Joachim Schipper (j.schipper_at_math.uu.nl)
Date: 11/25/05

  • Next message: Shenk, Jerry A: "RE: Identifying whether 2 IPs are from the same server"
    Date: Fri, 25 Nov 2005 14:42:36 +0100
    To: pen-test@securityfocus.com
    
    

    On Thu, Nov 24, 2005 at 01:58:58PM +0000, BSK wrote:
    > Hello,
    >
    > I am doing a Penetration Testing for 2 IP addresses.
    > My findings till now for both the servers are exactly
    > same. I strongly feel that both the IPs belong to the
    > same machine. May be a scenario where two NICs are on
    > the same machine with two Public IPs. I ran HPING to
    > match their IP IDs but it shows different series for
    > both of them.
    >
    > Is there any other technique that we can use to
    > ascertain such a situation?
    >
    > thank you

    If you can cause high system load in some way other than flooding all
    the bandwidth, you could try correlating the responsiveness of interface
    #2 with the amount of stuff sent to interface #1.

    However, it's not impossible that you are looking at two
    identically-configured servers...

                    Joachim

    ------------------------------------------------------------------------------
    Audit your website security with Acunetix Web Vulnerability Scanner:

    Hackers are concentrating their efforts on attacking applications on your
    website. Up to 75% of cyber attacks are launched on shopping carts, forms,
    login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
    futile against web application hacking. Check your website for vulnerabilities
    to SQL injection, Cross site scripting and other web attacks before hackers do!
    Download Trial at:

    http://www.securityfocus.com/sponsor/pen-test_050831
    -------------------------------------------------------------------------------


  • Next message: Shenk, Jerry A: "RE: Identifying whether 2 IPs are from the same server"

    Relevant Pages

    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • Re: Active Directory user enumeration
      ... > Audit your website security with Acunetix Web Vulnerability Scanner: ... > login pages, dynamic content etc. Firewalls, SSL and locked-down servers are ... Cross site scripting and other web attacks before hackers do! ...
      (Pen-Test)
    • RE: Getting Printer IP Addresses Prior to Pen Testing - Question About DHCP
      ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Hackers are concentrating their efforts on attacking applications on your ... Up to 75% of cyber attacks are launched on shopping carts, forms, ... login pages, dynamic content etc. Firewalls, SSL and locked-down servers are ...
      (Pen-Test)
    • Re: Ping a mac address
      ... Axis print servers... ... > Audit your website security with Acunetix Web Vulnerability Scanner: ... Cross site scripting and other web attacks before hackers do! ...
      (Pen-Test)
    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)