Penetration Testing: RE: nessus exceptions

["Jerry Shenk" <jshenk () decommunications com>]

Put a web server on an odd port.  I've seen a couple companies
completely miss them....maybe even put a web server on a well-known port
but give it some vulnerability and see if they even validate the
services on the port.

-----Original Message-----
From: Chris Griffin [mailto:cgriffin () dcmindiana com] 
Sent: Monday, August 02, 2004 2:58 PM
To: pen-test () securityfocus com
Subject: nessus exceptions


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi list,
Im trying to find some good holes, that aren't major security issues,
that i can create on a machine to see if our testing company really
uses anything other than nessus.



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBDo7EeFLbG0PZdVwRAmaSAJ9gHU7w6vbI9DGKWa7xmUQ31qKSBQCgpcpq
cC69CeYr16OsfuYu6u1oe8U=
=bGZi
-----END PGP SIGNATURE-----