Tag Info

New answers tagged

0

It depends a lot on the setup. If a trace is running anywhere but on your local subnet, you cannot detect it, period. On a local subnet, it depends a lot on where and how the trace happens: If it happens at the edge of the segment (on the router, for instance), you cannot detect it. If it happens from a machine connected on the same segment (ethernet) ...


1

NMAP is a tool meant for locating open ports and identify running services on a system. But thanks to the NSE you're capable of running a predefined list of scripts which scan for potential vulnerabilities and even perform exploitation. But you shouldn't rely on NMAP for that. For vulnerability assessment purposes, there are specialized tools available like ...


5

The first thing to note here is that banner grabbing is an error prone way to check for vulnerabilities in a lot of cases (as OS vendors backport security fixes without updating version numbers). Nessus as an example will try and work around that, but it's not foolproof. The best way to address checking your security with scanners is to get them to do ...


2

This sounds very much like security by obscurity to me. You are trying to hide the vulnerability from automated scanners. While such a measure might throw off simple scans, it does not actually address the actual problem. You would still have to keep up to date with patches to secure your server. As you have mentioned, it might create a false sense of ...



Top 50 recent answers are included