Penetration Testing: RE: Tool to find hidden web proxy server

["Jeff Gercken" <JeffG () kizan com>]

Why not just look for the src of http request syn packets at your
network boundary. 

Using tcpdump:
tcpdump -i eth0 -qnl 'tcp[13]==2' and port 80

The bpf expression 'tcp[13]==2' and port 80 is also a valid Ethereal
Capture filter statement if you're win32 inclined.

More help on BPF syntax at:
http://home.insight.rr.com/procana/index.html

-Jeff

-----Original Message-----
From: vinay mangal [mailto:vinay.mangal () eil co in] 
Sent: Wednesday, September 01, 2004 7:27 AM
To: Pen
Subject: Tool to find hidden web proxy server

Dear all,

I am looking for a tool to find the hidden web proxy server in my local
network.

Any hint will be useful.

with regards
Vinay


------------------------------------------------------------------------
------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one
interaction
with one of our expert instructors. Check out our Advanced Hacking
course,
learn to write exploits and attack security infrastructure. Attend a
course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------
-------


------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
-------------------------------------------------------------------------------