Tag Info

New answers tagged

0

You can easily set your up address as static and then change your Mac address to match that of the real hardware at that ip but I have not tried this and dont know how it would work in practice.. could create some interesting results when it comes to port jacking etc.


1

Absolutely. One way to go would be with ARP spoofing. It can be used to put your node as a gateway for the network.


0

Funny you ask that, I've been doing tests on that and the only thing I was able to spoof was the mac-address in Linux Backtrack such that I was able to tell my switch that I am another PCs mac address but NOT IP address such that I could see all the data being sent to the other PC and go on undetected (Man in the middle attack). You can however mask your ...


1

If it's that much of a secure environment you should never disable your IDS. Besides, if your IDS picks up your vulnerability scanner - Thats good as you know your IDS is working and not been tampared with. I'd recommend something like: 1. Add your IP (which you'll be doing your scan from) to a whitelist so you're excluded from your rules then do your ...


1

On a) most IDS' allow the option of blocking addresses from generating alerts which answers your b). I believe the approach you are taking is a decent approach however, I need chime in that it is BEST to perform dual scanning. From the OUTSIDE of your perimeter, and from the inside. The reasoning is simple, external scanning usually finds nothing more than ...


1

You've got a number of options. The first and most common is to instruct the IDS to ignore attacks originating at the vulnerability scanner, and to configure the vulnerability scanner to correspond to the IDS. The second solution, which requires a lot more work, but has a lot more value is to take this as an opportunity to validate the behavior of both ...


0

IIRC Wpscan just tests for the presence of the plugin not that it is a version which is specifically vulnerable, so what you're seeing would be consistent with the site having the plugin installed but a non-vulnerable version. Beyond using tools like wpscan you could just use standard black-box web app testing tools, like arachni and then move on to manual ...



Top 50 recent answers are included