Home page logo
/

pen-test logo Penetration Testing mailing list archives

Re: Tool to find hidden web proxy server
From: grutz () jingojango net
Date: Wed, 1 Sep 2004 13:44:20 -0700

On Wed, Sep 01, 2004 at 04:56:44PM +0530, vinay mangal brazenly wrote:
I am looking for a tool to find the hidden web proxy server in my local
network.

Umm, well. Do you have any idea what port it would be listening on?

step 1. nmap the network looking for that port
step 2. use netcat to connect to each system or roll your own script
step 3. use the URI -> GET http://internalserver/ HTTP/1.0
step 4. look at the results, if it's a proxy then you should get the
        index page (or whatever) from "internalserver".

There are many other ways, but this is just one brute force way.

-- 
When little kids ask where rain comes from, I think a cute thing to tell him
is "God is crying." And if he asks why God is crying, another cute things to
tell him is "Probably because of something you did."            - Jack Handy

------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
-------------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]