Penetration Testing mailing list archives

Info about ConcentricHost...?


From: "Jens Knoell" <jens () ing twinwave net>
Date: Mon, 13 May 2002 00:59:45 -0600

I recently ran across the following webserver ID, and could not really find
any information about it:

ConcentricHost-Ashurbanipal/2.0 (SomeCompany Webhosting)

In the brackets is the hosting company's name.

The host seems firewalled, as the nmap scan reported an unknown host - but
another banner reveals that it's quite likely a Solaris machine.

I would suspect that the banner gets altered by the firewall. Can anyone
shed some light on this, or point me to some papers about that specific
banner?

The goal of the pentest, btw, was to prove that a firewall doesn't
necessarily stop cautious hackers. So far, I've reached that goal, but I'd
like to know a _little_ bit more to satisfy my own curiosity.

Thanks a lot
Jens Knoell


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


Current thread: