Penetration Testing: Re: Stunnel Problems

[Joerg Over <over () dexia de>]

Hi!

At 00:13 07.12.01 -0000 you wrote:
---8<----------------snip
->I am attempting to access a Web Server sat behind Netscape (NetCache?) 3.5
->proxy. Here is what I am doing.
->
->stunnel -c -d 80 -r <remotehost>:443
->and point a browser on local host to 80.
---8<----------------snip

I might be entirely wrong, but maybe depending on _how_ you point your
browser, it might not try to encrypt in the first place.

I'd think, that pointing like:
http://localhost/

might not even try encryption, while

https://localhost:80/

might trick the browser into it.

Just a shot in the blue, and sorry if I didn't understand the site specific
part (that looked like it might have been an entirely different access
method, using a browser directly resp. using s_client without stunnel; if
not, I'm wrong, of course)


jo

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/