Justin Cooney
Web Development Tips and Examples
Category: Penetration Testing
-
In an earlier article I talked about how to set up a batch script to loop through a range of IP addresses and attempt to resolve active machines within that range. In this article I will follow up on my earlier examples to help make the results of the scan more accurate.
-
Sometimes you will want to find out more about your local area network and what machines are running at certain IP addresses. Querying the domain name server can be unreliable since some machines may be hidden, so sending a direct ping is the most reliable way of checking for the existence of a machine.
-
WPAD stands for Web Proxy Auto-Discovery protocol. At this point in time it’s still supported by most browsers although it is an old protocol now. Most companies don’t rely on WPAD because of its inherent vulnerability to man in the middle attacks.