3 ms·
That's what I was trying to say, you have access to a machine like a webserver that had internet-facing services you could exploit and now you want to go deeper
by revelation 10y ago
That's what I was trying to say, you have access to a machine like a webserver that had internet-facing services you could exploit and now you want to go deeper into the network.
Or do they usually only speak SNMP on a management port?
- tptacek 10y agoNo, I'm saying you can't do that with this bug; that's what I mean by "not a pivot bug". It's a way of persisting inside access you got some other way. Because, again, people don't listen to SNMP on the outside interface.
- throwaway5676 10y agoAnd that is what the parent is saying. The "other way" is through the web server that is exposed to the internet and can reach the internal ASA.
- tptacek 10y agoReaching "the internal ASA" isn't giving you access the webserver didn't already have, hence, persisting, not pivoting.