Has anyone probed this server?

[simon]

Has anyone probed this server? If so what have you found? I would love to know. I am NOT giving any permission to try to own this server.

But if you have found some interesting things or have some ideas I would love to discuss them with you.

I would like to maybe start a place on the main server domain to give credit to people who have helped audit the box and let them say a few things...

Ideas?
Simon
simon@willhaven.org

[converge]

I know I've seen a sploit for the board, but I'm pretty sure it's an older ver...

I had run a quick portscan to test something out, but didn't really pay attention to anything... well, at that point :)

[rudeboy]

21,25,53,80,110, 3306 are open
137,138,139 are filtered
then again it could be lying...

[converge]

yeah.. i was wondering about the port thing... It looks like it could be a winbox, but the TCP fingerprint doesn't match

interesting...

[Chris]

Originally posted by c0nv3r9
yeah.. i was wondering about the port thing... It looks like it could be a winbox, but the TCP fingerprint doesn't match

interesting...


According to Netcraft...

The site forum.defcon.org is running Apache/1.3.9 (Unix) Debian/GNU PHP/4.0.3pl1 AuthMySQL/2.20 mod_perl/1.21_03-dev on Linux

[Xp0nential]

I ran nmap -sS -v -P0 -O
on it and it predicts a Linux Kernel which seems right.
+ I ran queso which approximated the same thing
+ whisker gives
Server: Apache/1.3.9 (Unix) Debian/GNU PHP/4.0.3pl1 AuthMySQL/2.20 mod_perl/1.21_03-dev

Thus it seems to me that its a linux box.

[simon]

yes.

anyone find anything they want to email me about?

simon@willhaven.org