|
Frequently Asked Questions
1. What version of Windows does Infiltrator work
with?
Infiltrator will work with Windows 2000 and XP.
2. What types of computers can I scan with
Infiltrator?
Infiltrator can scan any computer, regardless of what
operating system is running on it. However, Infiltrator's information
enumeration scanning (i.e.: file shares, users, etc.) is geared
towards Windows computers, or computers running Samba.
3. What types of vulnerabilities does Infiltrator
detect?
Infiltrator detects and alerts you of the following
vulnerabilities:
- Improper/Insecure registry configurations
- Suspicious open/listening ports
- Popular CGI/Scripting exploits
- Exploitable services running
- Exploitable HTTP servers running
- Insecure user configurations
- Insecure password policies
4. Can Infiltrator generate reports for
presentations and viewing?
Yes, Infiltrator has a powerful built in report
generator for generating simple, or complex reports.
5. Can I scan my network in stealth with
Infiltrator?
No, Infiltrator is not a quiet scanner - it creates an
easily followed trail while it is scanning, as it is a tool designed
for network administrators and computer owners. It should now be used
as hacking tool - however Infiltrator allows you to quickly audit your
network using the same techniques a hacker would.
6. Can Infiltrator perform brute force attacks?
Yes, Infiltrator has built in cracking facilities to
crack SNMP accounts, file shares, and FTP accounts.
7. Sometimes the UDP scan returns all
false-positives?
Depending on your connection speed and latency at the
time of the scan, the UDP scan may return false positives on many or
all of the ports it checks. This can be remedied by setting a higher
timeout in the Advanced settings of Infiltrator, or by waiting a
minute and re-scanning.
8. When I scan my own computer locally, then
remotely, I get different results?
This is to be expected. When scanning a computer
locally (i.e.: you are scanning the computer you are using to do the
scan), you are already running with administrator privileges (unless
you are using a guest account) and all the scans will typically
succeed and reveal information about your computer. A remote scan
should not reveal too much, or any information about your computer -
as this is what an outside potential attacker could use against you.
9. How can I use Infiltrator to get an accurate
depiction of my computer's security?
To get an extremely accurate depiction of your
computer's security you should perform 3 total scans:
- A local scan of the computer you are testing -
to see what information a physical user of your machine could
obtain.
- A scan of your computer from another computer on your
network - to see what information other network users can
obtain from your computer.
- An external scan of your computer from outside
of your network - to see what information a totally remote, outside
user can obtain from your computer.
|
Infiltrator
