Re: Pen-Testing Smoothwall FireWall

From: s-williams@nyc.rr.com
Date: Thu Sep 21 2006 - 13:42:43 EDT


I believe its the corp versionn as far as services and everything else I have to keep digging for more in formation. Thanks for the head start all other information is still welcome.
Sent via BlackBerry from T-Mobile

-----Original Message-----
From: Machiavel <pierreluc.giguere@gmail.com>
Date: Thu, 21 Sep 2006 07:55:41
To:s-williams@nyc.rr.com
Cc:Victor Chapela <victor@sm4rt.com>, listbounce@securityfocus.com,pen-test@securityfocus.com
Subject: Re: Pen-Testing Smoothwall FireWall

My guess:

Figure out wich version of SmoothWall is running on the pc (express,
corporate etc ...)

Try to do a firewall rules enumeration (open ports to ...)

Verify each running services to figure out if there is any public
exploits or else

Once again, only a guess ;)

Cheers

--
Machiavel
On 9/20/06, s-williams@nyc.rr.com <s-williams@nyc.rr.com> wrote:
> Hey Guys,
>
> I am doing a test and noticed that port 222, 80, 81 and a few others were open. After doing a few more test I believe the are using Smoothwall on one end of the network.
>
> Do any have a few pointers on pen testing a Smoothwall box?
> Sent via BlackBerry from T-Mobile
>
> ------------------------------------------------------------------------
> This List Sponsored by: Cenzic
>
> Need to secure your web apps?
> Cenzic Hailstorm finds vulnerabilities fast.
> Click the link to buy it, try it or download Hailstorm for FREE.
> http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
> ------------------------------------------------------------------------
>
>


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:56:59 EDT