Penetration Testing: RE: Block OS Detection

["Ofer Shezaf" <OferS () Breach com>]

Reverse proxy? So at least for web servers you have a simple solution.
You might be able to reverse proxy few other protocols.

~ Ofer Shezaf

> -----Original Message-----
> From: listbounce () securityfocus com
> [mailto:listbounce () securityfocus com] On Behalf Of Gadi Evron
> Sent: Saturday, September 01, 2007 11:08 AM
> To: Attari Attari
> Cc: pen-test () securityfocus com; pen-test-return-
> 1078485025 () securityfocus com
> Subject: Re: Block OS Detection
>
> Not everything is good, but you can overwrite different packet values
> using.. a firewall for example.
>
> Just one thingie.
>
>
> On Fri, 31 Aug 2007, Attari Attari wrote:
>
> > Hello All:
> >
> > Is there a PRACTICAL solution from PRODUCTION
> > environments that can be used to block OS detection
> > from tools like NMAP? I googled and read some notes
> > but couldn't find a real world solution to blocking
> > Windows & Linux OS detection.
> >
> > I'm quite sure I'll get the right inputs here.
> >
> > Thank you.
> >
> > Attari
> >
> >
> >      Unlimited freedom, unlimited storage. Get it now, on
> http://help.yahoo.com/l/in/yahoo/mail/yahoomail/tools/tools-08.html/
> >
---------------------------------------------------------------------
> ---
> > This list is sponsored by: Cenzic
> >
> > Need to secure your web apps NOW?
> > Cenzic finds more, "real" vulnerabilities fast.
> > Click to try it, buy it or download a solution FREE today!
> >
> > http://www.cenzic.com/downloads
---------------------------------------------------------------------
> ---
> >
-----------------------------------------------------------------------
> -
> This list is sponsored by: Cenzic
>
> Need to secure your web apps NOW?
> Cenzic finds more, "real" vulnerabilities fast.
> Click to try it, buy it or download a solution FREE today!
>
> http://www.cenzic.com/downloads
-----------------------------------------------------------------------
> -

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------