Penetration Testing mailing list archives

IRC protocols and insecurity


From: proc ps <procps () softhome net>
Date: Mon, 06 Sep 2004 21:00:17 +0800

Hello,

I've been looking for any white papers that describe the security/technical aspects of the IRC protocol, but so far just found mIRC exploits and insecurities.

I'm trying to secure a building network based on an OpenBSD 3.5 server and Win32 clients.

As the clients purpose are just for file sharing, email, internet access, instant messaging and some irc usage for the students.

How can I secure/scan for virii what the members are downloading via IRC? How about the possibilities of hijacking connections via IRC? What are the threats that can come to this network via the IRC protocol?

Thanks and best regards.

--



------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
-------------------------------------------------------------------------------


Current thread: