OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Nelson Brito (nelsontw-award.com)
Date: Fri Oct 12 2001 - 06:31:02 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    [...]

    : source port of 500? Is this one of those 'unofficial standards' and
    : hence the reason for Microsoft's implementation processing these packets
    : as normal?

    [...]

    If you send a UDP scan from nmap you will see this port IS OPEN, so you can
    realize that when UDP packet is send to any port, this port procced if it is
    work.

    PS: Attached is a proof-of-concept code that I sent to Security Focus.

    Sem mais,

    --
    Nelson Brito