Re: auditing VSE/DOS

From: v b (r0cketgrl@yahoo.com)
Date: Thu Nov 10 2005 - 09:20:52 EST

Christian --

Mr. Google is your friend. Plug VSE Audit programs
into Google and you will receive multiple hits. I
found the following most specific to DOS/VSE to get
you started:

http://tinyurl.com/dea9r

Also try the other links at www.auditnet.org

I am sure I have some VSE/MVS specific tools in my
archives. Contact me off-liacks are launched on
> shopping carts, forms,
> login pages, dynamic content etc. Firewalls, SSL and
> locked-down servers are
> futile against web application hacking. Check your
> website for vulnerabilities
> to SQL injection, Cross site scripting and other web
> attacks before hackers do!
> Download Trial at:
>
> http://www.securityfocus.com/sponsor/pen-test_050831
>
-------------------------------------------------------------------------------
>
>
>
------------------------------------------------------------------------------
> Audit your website security with Acunetix Web
> Vulnerability Scanner:
>
> Hackers are concentrating their efforts on attacking
> applications on your > website. Up to 75% of cyber attacks are launched on
> shopping carts, forms,
> login pages, dynamic content etc. Firewalls, SSL and
> locked-down servers are
> futile against web application hacking. Check your
> website for vulnerabilities
> to SQL injection, Cross site scripting and other web
> attacks
=== message truncated ===

                
__________________________________
Yahoo! FareChase: Search multiple travel sites in one click.
http://farechase.yahoo.com

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:

Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------

This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:09 EDT

t; base anything on
> > its output.
> >
> > Also, testing the existence of the user is rarely
> done on the level of
> > mail envelope. Therefore, you cannot expect the
> mailserver to either
> > reply right after sending the RCPT TO command that
> the user doesn't
> > exist or reply in such away after DATA is sent.
> The only thing you can
> > expect, is that if the user address is invalid,
> you will receive a
> > mailer daemon reply to the MAIL FROM address.
> >
> > But... This is also not certain. Some mailservers
> use a default
> > account for a given domain, eg. qmail, which I
> specialise in. If such
> > a setup is made, all mail to inexistant users in a
> given domain is
> > directed to a chosen existant account. Therefore
> you will not receive
> > any answer from the mailserver, if a bad e-mail
> address is given in
> > RCPT TO, since mail will be delivered to an
> existing user.
> >
> > Therefore, there is no tool and there will be no
> such tool. Which is
> > good, because if there was, spammers would have a
> much easier life
> > making databases of existing users, so they can
> sell them later on.
> >
> > Cheers,
> >
> > - --
> > Tomasz Nidecki, Sekr. Redakcji / Managing Editor
> > hakin9 magazine http://www.hakin9.org
> > mailto:tonid@hakin9.org jid:tonid@tonid.net
> >
> > Do you know what "hacker" means?
> > http://www.catb.org/~esr/faqs/hacker-howto.html
> >
> > Czy wiesz, co znaczy slowo "haker"?
> > http://www.jtz.org.pl/Inne/hacker-howto-pl.html
> >
> > -----BEGIN PGP SIGNATURE-----
> > Version: 2.6
> >
> >
>
iQCVAwUAQ28M6ER7PdagQ735AQE90gP9EXVRDGUNNQdWgSCHDeYItm7AuZzj0JYF
> >
>
ExOhwTC/863ATjCC18b3lGD+qCKvC3ud4q213HqFOUkEGEraWboxVziQluwbnWqz
> >
>
zjdlxfdj0JHPEP5aqTwS2JE34CvCXqMoN+tVVALD/RvcqqCYQr8jzNn+Q9uzePc2
> > x2FsceCmFSs=
> > =m5Ng
> > -----END PGP SIGNATURE-----
> >
> >
> >
> >
>
------------------------------------------------------------------------------
> > Audit your website security with Acunetix Web
> Vulnerability Scanner:
> >
> > Hackers are concentrating their efforts on
> attacking applications on your
> > website. Up to 75% of cyber attacks are launched
> on shopping carts, forms,
> > login pages, dynamic content etc. Firewalls, SSL
> and locked-down servers are
> > futile against web application hacking. Check your
> website for vulnerabilities
> > to SQL injection, Cross site scripting and other
> web attacks before hackers do!
> > Download Trial at:
> >
> >
> http://www.securityfocus.com/sponsor/pen-test_050831
> >
>
-------------------------------------------------------------------------------
> >
> >
>
>
------------------------------------------------------------------------------
> Audit your website security with Acunetix Web
> Vulnerability Scanner:
>
> Hackers are concentrating their efforts on attacking
> applications on your
> website. Up to 75% of cyber attacks are launched on
> shopping carts, forms,
> login pages, dynamic content etc. Firewalls, SSL and
> locked-down servers are
> futile against web application hacking. Check your
> website for vulnerabilities
> to SQL injection, Cross site scripting and other web
> attacks before hackers do!
> Download Trial at:
>
> http://www.securityfocus.com/sponsor/pen-test_050831
>
-------------------------------------------------------------------------------
>
>
>
------------------------------------------------------------------------------
> Audit your website security with Acunetix Web
> Vulnerability Scanner:
>
> Hackers are concentrating their efforts on attacking
> applications on your
> website. Up to 75% of cyber attacks are launched on
> shopping carts, forms,
> login pages, dynamic content etc. Firewalls, SSL and
> locked-down servers are
> futile against web application hacking. Check your
> website for vulnerabilities
> to SQL injection, Cross site scripting and other web
> attacks
=== message truncated ===

                
__________________________________
Yahoo! FareChase: Search multiple travel sites in one click.
http://farechase.yahoo.com

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:

Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------

This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:09 EDT