Penetration Testing: Re: nessus exceptions

[Jacco Tunnissen <jacco () honeypots net>]

On Tue, Aug 03, 2004 at 11:24:47PM -0300, Andres Riancho wrote:

[..]

> Maybe you could put some daemon from the honeypot project
> [www.honeypots.net] to listen on some host that is scanned but aint really
> important. But once again... production servers are not a good place to
> test this.
Hi Andres,

To avoid some confusion, here's just a small correction with regard to the
location mentioned above.

The offical website for The Honeynet Project is located at
http://www.honeynet.org/

The Honeypots.net website also includes sections with whitepapers and
software, but is a separate project.

Furthermore I agree with you on the placement of the honeypot: do not use
the production environment for an experiment like this (in the context of
the current discussion thread).

Grtz,

Jacco Tunnissen
-- 
http://www.honeypots.net/
Intrusion Detection Systems,
Honeypots, Incident Handling