Penetration Testing mailing list archives

Re: Remote connection to Webmin Service (Port 10000)


From: "LFM" <anonimo () fibertel com ar>
Date: Fri, 6 Feb 2004 13:58:53 -0300

Hi,

Try using openssl so you can connect to a ssl enabled web site and issue
http commands as you would if you were doing it against a nonssl web site
using netcat or telnet.

$ openssl s_client -connect localhost:443 -state -debug
GET / HTTP/1.0

Regards,

---------------------------------------------------
Leandro Federico Meiners
CYBSEC S.A. Security Systems
E-mail: lmeiners () cybsec com
Tel/Fax: [54-11] 4382-1600
Web: http://www.cybsec.com

----- Original Message ----- 
From: "Jeremiah Cornelius" <jeremiah () nur net>
To: "Wu Fei Liang" <cms01017 () cms ac>; "Jeff Dell" <jdell () activeworx com>
Cc: <pen-test () securityfocus com>
Sent: Friday, February 06, 2004 5:39 AM
Subject: Re: Remote connection to Webmin Service (Port 10000)


On Thursday 05 February 2004 18:16, you wrote:
Try https instead of http. If they have https enabled in webmin, it might
not automatially change from http.

Jeff

Hi Jeff!

I've already tried this with the browser. It won't work. And since telnet
can't speak ssl I don't know what to do. Maybe there is another tool?

Use OpenSSL and stunnel for your telnet.

www.stunnel.org

There may still be no response.  This could have tcpwrappers on it, etc.



---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: