RE: Unknown App

From: Bartholomew, Brian J (BartholomewBJ@state.gov)
Date: Thu Jul 21 2005 - 12:46:53 EDT

• Next message: David Eduardo Acosta Rodríguez: "Re: VoIP testing Help"
• Previous message: Dan Rogers: "verify HTTPS 'vulnerabilities'"
• Maybe in reply to: Scott Fuhriman: "Unknown App"
• Next in thread: ilaiy: "Re: Unknown App"
• Reply: ilaiy: "Re: Unknown App"
• Reply: okrehel@loews.com: "RE: Unknown App"
• Reply: Aleksander P. Czarnowski: "RE: Unknown App"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

A simple Fport should tell you what it is...

http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/proddesc/fport.htm

Brian J. Bartholomew (CISSP)
Red Cell
US Department of State
Bureau of Diplomatic Security
Office of Computer Security
Ph: 571-345-2670
Cell: 202-369-6349

-----Original Message-----
From: thenightweighsheavy@gmail.com
[mailto:thenightweighsheavy@gmail.com]
Sent: Thursday, July 21, 2005 2:56 AM
To: pen-test@securityfocus.com
Subject: Unknown App

Hello,

During a recent pen-test, I discovered that port 80 is opened by an unknown application on multiple client workstations (WinXP). No web server appears to be running or installed - I've tested a few things, but I'm curious what the list thinks is the best next-step to take.
Thanks,
Golden Earring

• Next message: David Eduardo Acosta Rodríguez: "Re: VoIP testing Help"
• Previous message: Dan Rogers: "verify HTTPS 'vulnerabilities'"
• Maybe in reply to: Scott Fuhriman: "Unknown App"
• Next in thread: ilaiy: "Re: Unknown App"
• Reply: ilaiy: "Re: Unknown App"
• Reply: okrehel@loews.com: "RE: Unknown App"
• Reply: Aleksander P. Czarnowski: "RE: Unknown App"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:36 EDT