Penetration Testing mailing list archives

Re: [PEN-TEST] Recourse Tech. and Manhunt


From: Bill Pennington <billp () boarder org>
Date: Thu, 15 Feb 2001 22:13:59 -0800

You might want to check out this:

http://www.fatelabs.com/f8-110100-mantrap.txt

"Jonathan S. Keim" wrote:

hi all,

does anyone have information on the recourse technologies product
"manhunt" or anything else that's not on their web pages?

(for those that don't want to go to www.recourse.com and read up on the
product.  there's also some info in the pen-test archives starting
10/2/00.)

what i'm really interested in is manhunt's dependence on other manhunt
products, as well as network infrastructure.  the FAQ says that each
manhunt monitor can communicate with other manhunts upstream and
downstream to coordinate information gathering and to perform tracing of
a denial of service attack.  this seems like it has a real vulnerability
from saturation of the communication links between up/downstream
monitors...

anyway, thoughts are appreciated.

jon

--
Jonathan S. Keim                                         Class of 2001
jonkeim () princeton edu                                    117 1901 Hall
    GnuPG Public key: http://www.princeton.edu/~jonkeim/jonkeim.gpg

--


Bill Pennington - CISSP


Current thread: