
YuChakTinMichael‘sGIACGCFWProjectAssignment
Page 144
CHAMinitsownvulnerabilityresearcheffortsandhasbeeninvaluableinenhancing
itscapabilitiesinreleasingmanysuchadvisories.”(fromwww.eEye.com
38
)
3,RetinasupportsOSdetectionthatcanaccuratelydeterminetheOSplatformofthe
targetsystem.
Weespeciallywantretinatotrytodetectthefirewall/routertypewhen
performingtheportscan. Whenafirewall/router’sidentityisrevealedto
Retina,thatmeansadditionalsecuritymeasureisnecessary…ifthehacker
knowswhatfirewall/routerweareusing,itwillbemucheasierforhim/herto
focustheattackeffort.
TotakefulladvantagesofRetina’scapabilities,someoptionsmustbeconfiguredfor
themostextensivescanning.Theseinclude:
CompleteScan –EnableForceScan.Enableall4optionsofCHAM,includingFTP,
POP3,SMTPandHTTP.
Checkall –scanall theportsinthelist.
38
http://www.eeye.com/html/Products/Retina/index.html
Kommentare zu diesen Handbüchern