Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Bugtraq: Re: Bybass HTTP ( extension files ) in ISA 2004

Re: Bybass HTTP ( extension files ) in ISA 2004

From: <medozero_at_yahoo.com>
Date: 16 Jul 2006 10:50:41 -0000
('binary' encoding is not supported, stored as-is) well for those who didnot get it it is like this
make a rule in ISA and in the role make the source is internal network and the destination is external now configure the HTTP policy to block specific extension like zip ok now test it try to download any file.zip y0 will have that ISA will prevent y0 from downloading it > now try to add # to the end of the file like file.zip# and see what will happen . If y0 have any comment on this plz reply . and for some ppl who think this is a scripkeddies thing it is not as it is a bug as i see it .
Received on Jul 18 2006
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]