Re: [PEN-TEST] websence bypass ?

From: Tony King (tonykingat_private)
Date: Thu Apr 26 2001 - 05:19:49 PDT

  • Next message: Jim Huddleston: "Re: [PEN-TEST] Solaris"

    You can sometimes add :80 to the end of a url http://www.yahoo.com:80
    You can also use the ip address of the webserver http://xxx.xxx.xxx.xxx
    Maybe even add a :80 to the end of the ip url.
    There is also a way to convert the ip address into a number string, I have
    to go talk to some
    people to remember how to do that one, but email me back so that I remember.
    Tony
    
    
    At Wed, 25 Apr 2001 13:57:56 +0200, =?iso-8859-1?q?francois=20RAYNAUD?=
    <francois_raynaudat_private> wrote:
    
    >
    >hi folks,
    >
    >while doing a penetration testing for my company, they
    >ask if i could test Websence, which is a url proxy
    >filter.
    >Does somebody has any idea how to bypass it from the
    >inside ?
    >please no answer with the traditional "change your
    >proxy !"
    >
    >cheers
    >
    >=====
    >François Raynaud
    >England       \!/
    >             (@ @)
    >mobile 0044 (0)7754 749971
    >      ----oOO-(_)-OOo--------
    >
    >___________________________________________________________
    >Do You Yahoo!? -- Pour faire vos courses sur le Net,
    >Yahoo! Shopping : http://fr.shopping.yahoo.com
    >
    Free, encrypted, secure Web-based email at www.hushmail.com
    



    This archive was generated by hypermail 2b30 : Thu Apr 26 2001 - 07:49:14 PDT