From: Bénoni MARTIN (Benoni.MARTIN@libertis.ga)
Date: Wed Sep 01 2004 - 13:44:59 EDT
Well...
- The easier way is to scan your whole network and see the machines which are up (nmap -sS xxx.xxx.xxx.0/24). Maybe, you will find a strange machine which can be your proxy.
- But you can have a PC running also your proxy, so you will just see usual machines. Then scanning the ports (nmap -sS -p 1-65535 -O xxx.xxx.xxx.0/24) should help you to find well known proxys as Squid listening on default port(s).
- If this dos nof work, why not look at your FW/Load Balancer/... IN NIC (the NIC of your device beeing on your network, not the DMZ of Internet one) ? Launching on it a sniffer (for instance tcpdump -i in_nic -proto http | tee log or just tcpdump -i in_nic -proto http) should give you replies from the inside from 2 adresses: your web server and the proxy...
HTH :)
-----Message d'origine-----
De : vinay mangal [mailto:vinay.mangal@eil.co.in]
Envoyé : mercredi 1 septembre 2004 12:27
À : Pen
Objet : Tool to find hidden web proxy server
Dear all,
I am looking for a tool to find the hidden web proxy server in my local network.
Any hint will be useful.
with regards
Vinay
------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. Check out our Advanced Hacking course, learn to write exploits and attack security infrastructure. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization.
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
-------------------------------------------------------------------------------
------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
-------------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:03 EDT