Penetration Testing: RE: AIX Pen test tools

From: Carrick, Brian A <brian.carrick_at_eds.com>
Date: Mon, 26 Jan 2004 18:24:45 -0000

Yes and I agree with Jason

It's Unix so the usual array of Unix techniques apply.
Remember that the shadow file is not shadow but /etc/security/passwd and is
a different format.
John's ushadow doesn't work but cut and paste does;)

lsd-pl.net has some AIX sploits.

-----Original Message-----
From: Jason Ellison [mailto:infotek_at_datasync.com]
Sent: 23 January 2004 21:50
To: Sanjay K. Patel
Cc: pen-test_at_securityfocus.com
Subject: Re: AIX Pen test tools

nessus works well.

On Fri, 23 Jan 2004, Sanjay K. Patel wrote:

> We have a client that has a few AIX servers. Has anyone done a pen
> test on them before? WE are suing eEye Retina for the other servers.
>
> Any help will be appreciated.
>
> SKP
>
>
>
> ----------------------------------------------------------------------
> -----
>
----------------------------------------------------------------------------
>

---------------------------------------------------------------------------
----------------------------------------------------------------------------

---------------------------------------------------------------------------
----------------------------------------------------------------------------
Received on Jan 26 2004