Penetration Testing mailing list archives

RE: Unknown App

From: "Womack, Quintin T - Raleigh, NC - Contractor" <Quintin.T.Womack () usps gov>
Date: Thu, 21 Jul 2005 14:38:45 -0500

netstat -ano will list the PID of the application.

Quintin Womack

-----Original Message-----
From: thenightweighsheavy () gmail com
[mailto:thenightweighsheavy () gmail com] 
Sent: Thursday, July 21, 2005 2:56 AM
To: pen-test () securityfocus com
Subject: Unknown App

Hello,

During a recent pen-test, I discovered that port 80 is opened by an
unknown application on multiple client workstations (WinXP).  No web
server appears to be running or installed - I've tested a few things,
but I'm curious what the list thinks is the best next-step to take.
Thanks,
Golden Earring

Current thread:

Unknown App, (continued)
- - - Unknown App Scott Fuhriman (Jul 22)
- RE: Unknown App Bartholomew, Brian J (Jul 21)
  - Re: Unknown App ilaiy (Jul 21)
    - Re: Unknown App Fabián Gabriel Chiera (Jul 22)
  - RE: Unknown App okrehel (Jul 21)
  - RE: Unknown App Aleksander P. Czarnowski (Jul 21)
    - RE: Unknown App Lyal Collins (Jul 22)
- RE: Unknown App Jarmon, Don R (Jul 21)
- RE: Unknown App Andre Protas (Jul 21)
- RE:Unknown App Jordan Del-Grande (Jul 21)
- RE: Unknown App Womack, Quintin T - Raleigh, NC - Contractor (Jul 21)
- RE: Unknown App Hagen, Eric (Jul 22)
- Re: Unknown App thenightweighsheavy (Jul 25)
  - RE: Unknown App Scott Fuhriman (Jul 25)