From: Tom Farrar (tom.farrarit-ps.com)
Date: Wed Jun 24 2009 - 06:30:52 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Something like:

Nmap -vv -sT -sV -O -p 1521,1526,1575 -P0 --traceroute 'targetname'

-----Original Message-----
From: listbouncesecurityfocus.com [mailto:listbouncesecurityfocus.com]
On Behalf Of Phil Young
Sent: 22 June 2009 23:35
To: pma111
Cc: pen-testsecurityfocus.com
Subject: Re: Profiling a Networks Infrastructure

If you're just interested in Oracle couldn't you run an nmap scan for
the specific oracle port with a banner read (and traceroute the whole
thing, output to XML and let nmap map it for you in the gui!)

On Mon, Jun 22, 2009 at 11:18 AM, pma111<pmaneedhamhotmail.com> wrote:
>
> Is there a specific tool or procedure you use when you want to
"profile" a
> specific network. Namely, I would like to see what options somebody
could
> use to identify every internal Oracle Database / Database Server that
> resides on the Network. Could this be done without tools by some kind
of
> command line instruction, or would it require software installing on
the
> network. Or is it no way near as simplistic as this, and even a user
sat
> inside the network would need access to network documentation /
diagrams etc
> to identify a full list of all internal Oracle DB's / DB Servers.
> --
> View this message in context:
http://www.nabble.com/Profiling-a-Networks-Infrastructure-tp24148675p241
48675.html
> Sent from the Penetration Testing mailing list archive at Nabble.com.
>
>
>
------------------------------------------------------------------------
> This list is sponsored by: Information Assurance Certification Review
Board
>
> Prove to peers and potential employers without a doubt that you can
actually do a proper penetration test. IACRB CPT and CEPT certs require
a full practical examination in order to become certified.
>
> http://www.iacertification.org
>
------------------------------------------------------------------------
>
>

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review
Board

Prove to peers and potential employers without a doubt that you can
actually do a proper penetration test. IACRB CPT and CEPT certs require
a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]