Penetration Testing mailing list archives
Re: failure notice
From: john lokka <merigoth () gmail com>
Date: Tue, 13 Oct 2009 09:45:18 -1000
One suggestion is md5 hashing of the web site and running a "tripwire"-like product. If there's a detected a change, a script runs that stores the changed web site and copies over a fresh copy from a secure location, preferrably from a CD/DVD. On Mon, Oct 12, 2009 at 9:07 PM, L. Pop <zhiglee () gmail com> wrote:
Hi, In my mind there are two ways to detect whether a website has been hacked, 1. to detect whether there worm fingerprinting 2. to detect whether there are malious url inside the website is there any other good methods? Is there any efficient existing tools do the job? Kind Regards, Pop ------------------------------------------------------------------------ This list is sponsored by: Information Assurance Certification Review Board Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. http://www.iacertification.org ------------------------------------------------------------------------
------------------------------------------------------------------------ This list is sponsored by: Information Assurance Certification Review Board Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. http://www.iacertification.org ------------------------------------------------------------------------
Current thread:
- Re: failure notice L. Pop (Oct 13)
- Re: failure notice john.bryson () oit gatech edu (Oct 13)
- Re: failure notice pand0ra (Oct 13)
- Re: failure notice john lokka (Oct 13)