Anyone like to try some Penetration - TechRepublic
General discussion
April 22, 2004 at 11:05 AM
H

Anyone like to try some Penetration

by hal 9000 . Updated 22 years, 1 month ago

Testing for me?

I have an unfair advantage here {after all they are one of my problem clients so I know them all too well} as it only took me 3 attempts to get in so I’ve chosen a non-critical Web Page with the same security measures taken as on their main network except for the obvious fact that the web page is in Apache rather than running under M$ programs but it was the best that I could come up with without compromising their operations.

The web address is

http://www.monarc-equipment.com/links/links.html

and it is user name & password protected {3 accounts} running on a Red Hat 7 system but as I don’t have much contact with the hosting company I’m unsure of the exact version of whatever other software they are running. This page is just a link to worldwide dealer?s network {sellers} so it has no importance but I would be interested in seeing if anyone can get in and have a look around.

The link I gave above while on their main web site is an unlinked page that has been placed there for a test. It contains nothing but sellers of heavy earthmoving plant world wide and could be gathered by anyone within a few days so it is not only useless but any form of assault on their Main Web Site will not get this page or any thing else of any importance as yet they have no dealers listed.

Now normally I would give this job to someone here who has had no direct contact with this company but owing to how they work everyone here knows them very well and the longest that it took any of my staff to crack was 30 minutes well everyone but the “Office Manager” anyway who wouldn’t have a clue about these things.

Good hunting

This discussion is locked

All Comments