Vulnerabilities Of Win XP?
Hi Net Security People
A friend has given me *permission* to "hack" their XP computer. They think
that security is a joke and XP erases all needs for such. Now, I can get their IP,
they are on a high speed connection 24/7 and run no firewalls at all.
Since they think I am a liar that they are vulnerable, they have asked me to prove it.
I want to take them up on such a challenge. If anyone here has suggestions for just
such a situation, I will post results for you guys... I run Win2Kpro on highspeed conn,,,
-Gecko
Re: Vulnerabilities Of Win XP?
Another "safe" way to show security holes is to use Nessus security scanner. The deamon have to be running on a *nix box, but a client is available for win32. If you have a *nix box I would advice you to use Nessus (maybe not as fun as doing it yourself though :)).
Quote:
Originally posted by gecko
Hi Net Security People
A friend has given me *permission* to "hack" their XP computer. They think
that security is a joke and XP erases all needs for such. -Gecko
Quote:
Website: www.nessus.org
The "Nessus" Project aims to provide to the internet community a free, powerful, up-to-date and easy to use remote security scanner. A security scanner is a software which will audit remotely a given network and determine whether bad guys (aka 'crackers') may break into it, or misuse it in some way.
Unlike many other security scanners, Nessus does not take anything for granted. That is, it will not consider that a given service is running on a fixed port - that is, if you run your web server on port 1234, Nessus will detect it and test its security. It will not make its security tests regarding the version number of the remote services, but will really attempt to exploit the vulnerability.