reverse proxy identification
- From: sami ghourabi <sami.ghourabi@xxxxxxxxxx>
- Date: Fri, 12 Jan 2007 12:30:29 +0100
I'm currently pentesting C class subnet.
It seems that it hosts webservers, as a large number of IP @ replied OK to port 80 scan.
However I dont think that for each IP adress there is a physical server, but perhaps a multiplexing device that also does application firewalling.
According to nmap it may be a Blue Coat SG4.
When I browse to the IPs with firefox, I recieve several messages "No web site is configured at this address." for some IP.
Does anybody here know if this message is specific to a given reverse proxy/web server product ?
Any other experiences similar to this situation are welcome.
Sami.
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------
- Follow-Ups:
- Re: reverse proxy identification
- From: Javier Fernández-Sanguino
- Re: reverse proxy identification
- From: R. DuFresne
- Re: reverse proxy identification
- From: AdamT
- RE: reverse proxy identification
- From: Paul Melson
- Re: reverse proxy identification
- From: Andy Ashley
- Re: reverse proxy identification
- Prev by Date: RE: Which router to choose for port scanning
- Next by Date: Lab setup for security learning
- Previous by thread: New article on SecurityFocus: Wishes for 2007
- Next by thread: Re: reverse proxy identification
- Index(es):
Relevant Pages
|
|