Re: Tools to use if to see/check if System is Vulnerable

From: Angel (transnation2k@nospam.hotmail.com)
Date: 08/06/02 

From: "Angel" <transnation2k@nospam.hotmail.com>
Date: Tue, 06 Aug 2002 03:12:36 GMT

On 4-Aug-2002, "Duane Arnold" <darnold92@Insightbb.com> wrote:

> I lived in Hermosa and Redondo Beach and several other cities in the LA
> county. I spent many weekends partying in Laguna Beach. I lived there for
> about 15 years before moving back to the Midwest. You can believe me when
> I
> say I know the area well. One day I will have to go back just to see what
> has changed.
>
> Duane

I liked Hermosa, I lived in Redondo Beach for awhile too. Been in
Huntington
Beach and now Newport Beach/Irvine area.

Things change... change alot every 2 years or so. All local buddies just
move away, etc.. no more surfing buddies...

Got's to make new ones and buy me a new board.

> "Angel" <transnation2k@nospam.hotmail.com> wrote in message
> news:uP539.24752$X9.6359182@twister.socal.rr.com...
> >
> > On 1-Aug-2002, "Duane Arnold" <darnold92@Insightbb.com> wrote:
> >
> > > Well,
> > >
> > > Your first issue should be with www.grc.com and Gibson. Go to
> > > www.grcsucks.com
> > >
> > >
> http://lists.gpick.com/pages.asp?page=Security_Test_Sites&SID=G2192194461822
> > > 5 This is just one of many
> > >
> > > I think that if you want to www.google.com and did search on "Firewall
> > > testing" or something similar in the wording, you will find lots of
> > > links
> > > to firewall test utilities..
> > >
> > > Duane
> > >
> > >
> > >
> > >
> > > "Angel" <transnation2k@nospam.hotmail.com> wrote in message
> > > news:_Jl29.12527$X9.4129388@twister.socal.rr.com...
> > > > Tools to use if to see/check if System is Vulnerable
> > > >
> > > > At work we have our network a bit open and they are putting up
> > > > hardware firewall. I waned to know what tools to use
> > > > (shareware/freeware)
> > > > that I can use once I have an IP or did a GRC.COM or a port scan and
> > > > found
> > > > the 138, 139 and other various ports open including the IIS admin on
> > > > which
> > > > should never be on.
> > > >
> > > > I am a entry level guy but I use Linux for my web stuff; and these
> guys
> > > have
> > > > a NT machine that has "usernames" exposed (based on grc.com) and if
> > > > I
> > > > was
> > > > to use a password brute force type of program to try and get in and
> > > > if
> I
> > > can
> > > > get in
> > > > than I can show the admin guy that he needs to change things around
> and
> > > > maybe
> > > > put up that hardware firewall faster...
> > > >
> > > > He has a small SonicWall appliance and I would like to eventually
> > > > put
> in
> > > > a
> > > > PIX
> > > > but that's later when I fell more confident that I can install and
> > > > program
> > > > it right.
> > > >
> > > > There are some tools that I can use locally to figure out the *.sam
> > > > pw
> > > files
> > > > and such but from a remote connection from home -> office type of
> > > > program.
> > > >
> > > > I also have a Win or Unix box so it can be both platforms.. Unix or
> > > > NT...
> > > > base.
> >
> > That's what of 4 sites I've been to check the stuff... there are others
> from
> >
> > like: www.sdesign.com/securitytest/ and http://scan.sygatetech.com
> >
> > But.. I actually worked with 2 people, new at our company that met the
> > guy from GRC and they didn't speak highly of him. He said he's not
> > all that and he's more BS than real ***...
> >
> > I'm surprised that the guy lives in Laguna.. sort of Local to Orange
> County
> > and LA area...