Trustwave Application Penetration Test Digitaltransactions-080815

More documents

Recommendations

Info

CONFIDENTIAL INFORMATION – FOR INTERNAL USE ONLY Trustwave 2 Network Reconnaissance Application Penetration Test This phase of the testing focuses on gathering as much information about the target application infrastructure as possible. This report section details how we obtain information from interrogation probes directed at the target, and presents the combined results of research. Port scans attempt to determine what services the target is offering. TCP/IP fingerprinting is used to determine operating system type and version. Banner scanning is used to discover software types and version. 2.1 Port Scanning Port scanning is a highly effective technique used to determine what services a target system is offering. There is a wide range of methods ranging from obvious to nearly invisible. Trustwave employs SYN scanning, a method of scanning where TCP packets with the SYN flag set are sent requesting a connection. If a TCP packet with the SYN and ACK flags set is received from the target, indicating that the connection was accepted, a packet with the RST flag is sent to tear down the connection. 2.2 Banner Scanning Banner scanning is a technique for determining the type and version of a particular network service. The testing team connects to an open port and parses any information that is returned. This information is then used to search for exploits for that specific service and version. 2.3 Remote OS Detection via TCP/IP Stack Fingerprinting Trustwave utilizes OS fingerprinting in an attempt to discover the exact type and version of the operating system to provide additional insight into potential vulnerabilities. It should be noted that OS fingerprinting is most effective when at least one port on the target host is open, and at least one port is verifiably closed. If some piece of network hardware blocks all non-open ports, it significantly reduces the accuracy of the remote OS guess. 2.4 Reconnaissance Results The test team conducted reconnaissance against the services discovered, and/or listed in Table 1. The following table represents the core application infrastructure components: - 6 - Copyright © 2008 Trustwave. All Rights Reserved. CONFIDENTIAL INFORMATION – FOR INTERNAL USE ONLY
CONFIDENTIAL INFORMATION – FOR INTERNAL USE ONLY Trustwave Application Penetration Test IP Address Domain Names Operating System Applications Open Ports Notes 69.67.208.190 digitaltransactions.net Microsoft Windows Server 2003 SP1 Digitaltransactions 21/TCP, 80/TCP, 443/TCP IIS v6.0 Table 3 - Supporting Application Infrastructure - 7 - Copyright © 2008 Trustwave. All Rights Reserved. CONFIDENTIAL INFORMATION – FOR INTERNAL USE ONLY
Page 1 and 2: Boland Hills Application Penetratio
Page 3 and 4: CONFIDENTIAL INFORMATION - FOR INTE
Page 5: CONFIDENTIAL INFORMATION - FOR INTE

Trustwave Application Penetration Test Digitaltransactions-080815

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?