RE: Pen-Testing Windows from Solaris

From: Dieter Sarrazyn (dsrat_private)
Date: Tue May 13 2003 - 09:33:54 PDT

  • Next message: juan.losada@telefonica-data.com: "RE: Pen-Testing Windows from Solaris"

    Hi,
    
    My experience with installing nessus (and nmap) on solaris is that
    you'll have to compile almost everything from the source tarballs
    instead of installing the packages (from sunfreeware).
    
    I installed successfully nessus on Solaris 8.
    
    Greetz,
    Dieter
    
    > -----Original Message-----
    > From: Bojan Zdrnja [mailto:Bojan.Zdrnjaat_private] 
    > Sent: dinsdag 13 mei 2003 9:32
    > To: 'peter.king'; pen-testat_private
    > Subject: RE: Pen-Testing Windows from Solaris
    > 
    > 
    > Among tools that other people suggested, you can install 
    > Nessus on that machine and run tests on target machines. 
    > You'll need nmap for that as well.
    > 
    > Installation *can* be tricky, you can find some info on the 
    > following URL (it's for Solaris 7, but you can find it useful):
    > 
    > http://www.sunhelpdesk.com/users/john/nessus.htm
    > 
    > Best regards,
    > 
    > Bojan Zdrnja
    > 
    > > -----Original Message-----
    > > From: peter.king [mailto:peter.kingat_private]
    > > Sent: Tuesday, 13 May 2003 3:10 a.m.
    > > To: pen-testat_private
    > > Cc: peter.kingat_private
    > > Subject: Pen-Testing Windows from Solaris
    > > 
    > > 
    > > 
    > > 
    > > Hi
    > > 
    > > I have recently been given the task of Pen-Testing several
    > > large Windows networks, running a variety of versions of windows.
    > > 
    > > Unfortunatly the only platform I will have to conduct the
    > > tests will be a Sparc Solaris 2.6 box. I will have command 
    > > line access only to this box.
    > > 
    > > I envisage the main problems with the boxes to be poor
    > > passwords, open shares, IIS, and MS SQL.
    > > 
    > > Given these limits what command line tools would people
    > > suggest as the best ones to use that will run under Solaris 
    > > 2.6? I have my own ideas for several of them but would 
    > > appreaciate any extra input.
    > > 
    > > Cheers,
    > > 
    > > Peter
    > > 
    > > --------------------------------------------------------------
    > > -------------
    > > Did you know that you have VNC running on your network?
    > > Your hacker does.
    > > Plug your security holes.
    > > Download a free 15-day trial of VAM: 
    > > http://www.securityfocus.com/StillSecure-pen-test
    > > --------------------------------------------------------------
    > > --------------
    > > 
    > > 
    > 
    > 
    > --------------------------------------------------------------
    > -------------
    > Did you know that you have VNC running on your network?
    > Your hacker does.
    > Plug your security holes.
    > Download a free 15-day trial of VAM: 
    > http://www.securityfocus.com/StillSecure-pen-> test
    > 
    > 
    > --------------------------------------------------------------
    > --------------
    > 
    > 
    
    ---------------------------------------------------------------------------
    Did you know that you have VNC running on your network?
    Your hacker does.
    Plug your security holes.
    Download a free 15-day trial of VAM:
    http://www.securityfocus.com/StillSecure-pen-test
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Tue May 13 2003 - 11:21:05 PDT