Re: [PEN-TEST] Watchguard firebox II

[Alex Butcher <alex () S3 INTEGRALIS CO UK>]

"Skinner, Tim L." wrote:
> Hi,
>
> I am about to pen-test a watchguard firebox II firewall and I have never
> worked on one of those before.  Does anyone out there know of common
> exploits or problems with these things?

I've never had to go up against one either, so this is probably teaching
you to suck eggs here, but they're based on the Linux kernel, so that
would probably be a good place to start looking for vulnerabilities.
Also, the single example I've seen did some incredibly strange stuff
with the addressing (i.e. the internal interface had the same IP address
as the internal interface of the external router, if I remember
correctly), so don't let that catch you out if that's what you
encounter.

Best Regards,
Alex.
--
Alex Butcher                                      PGP/GnuPG Key IDs:
Consultant, S3 Systems Security Services          alex@s3       B7709088
PGP: http://www.s3.integralis.co.uk/pgp/alex.pgp  alex.butcher@ 885BA6CE

Attachment: alex.vcf
Description: Card for Alex Butcher