Penetration Testing mailing list archives

Re: failure notice


From: john lokka <merigoth () gmail com>
Date: Tue, 13 Oct 2009 09:45:18 -1000

One suggestion is md5 hashing of the web site and running a
"tripwire"-like product. If there's a detected a change, a script runs
that stores the changed web site and copies over a fresh copy from a
secure location, preferrably from a CD/DVD.

On Mon, Oct 12, 2009 at 9:07 PM, L. Pop <zhiglee () gmail com> wrote:
Hi,

In my mind there are two ways to detect whether a website has been hacked,
1. to detect whether there worm fingerprinting
2. to detect whether there are malious url inside the website

is there any other good methods?

Is there any efficient existing tools do the job?


Kind Regards,
Pop

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------



------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------


Current thread: