Conversation

Notices

1. Embed this notice
   Pauliehedron ✅ :donor: (pauliehedron@infosec.exchange)'s status on Tuesday, 06-Feb-2024 00:57:27 JST Pauliehedron ✅ :donor:

   • Kevin Beaumont

   @GossiTheDog I took a quick look at an ASA and a Firepower, and the web pages for the SSL are almost identical. No versioning in them. May be one of the reasons it hasn't been updated in 9 years.

   • Embed this notice
     pirate moo 🐮 (apiratemoo@infosec.exchange)'s status on Tuesday, 06-Feb-2024 01:05:09 JST pirate moo 🐮

     • Kevin Beaumont

     @GossiTheDog

     There are a few ways:

     1. Typical nc/telnet/ssh attempt to banner grab

     2. Using CDP to your advantage with Wireshark

     3. SNMP: Try to onesixtyone it and see if any of the comm. strs are public/reveal anything.

   • Embed this notice
     Craig Askings (haakon@aus.social)'s status on Tuesday, 06-Feb-2024 07:59:40 JST Craig Askings

     • Kevin Beaumont
     • Joel Michael

     @GossiTheDog @jpm get a trial account on run zero and try that?