Articles

Metasploit Framework Windows Tutorial
Remote Desktop Connection
Windows Processes That May Be Dangerous
How-To use NetCat a Tutorial
Common Linux Commands
Common Ports
Netcat Commands
HTTP Response Codes
War-Google Hack Terms
Wardriving
Avoiding Social Engineering and Phishing Attacks
Intrusion Detection on Linux
Linux Intrusion Detection
Penetration Testing Guide
Penetration Testing Tools
Social Engineering Fundamentals, Part I: Hacker Tactics
Social engineering (computer security)
The Psychology of Social Engineering

The Archives

General GSO
GovernmentSecurity.org News & Suggestions
In The News
Open Topic
General Security Information
Trash Can
Exploit & Vulnerability Mailing List Archives
Trial Member Forum
Product and Program Reviews GSO Tutorials
System Security
Windows Systems
Beginners Section
Linux & Unix Systems
File Downloads
Exploit Research & Discussion Trojan & Virus Errata
Networking Security / Firewall / IDS / VPN / Routers
System Hardening
E-Mail Security
Wifi Security
Trial Member Uploads
Upload discovered Trojans & Mal ware
GSO Programming Section
C , C++ , VC++
Visual Basic.NET
Perl /CGI
Java/Javascript
PHP/XML/ASP/HTML
Assembly + Other
The Cork Board
Network Security Consultant Directory
Network Security Jobs
The Archives
Encryption Information
General Network Security
Internet Anonymity
HTTP Protocol Security
Linux Security
MS IIS Information
Exploit Articles
Programming / Tool Design
GSO Software Projects
Public Downloads
Microsoft Security Questions and Papers

Full Version: Flaw In Websence
Kuldeep Rawat
I have recently deployed websense in my organization and blocked all unwanted sites likes games, porn, shopping, job search etc. Everything worked fine till one smart guy downloaded the freeware tools which bypasses the websense and allow the access to all the unwanted site.

Does anyone expereince the similar type of problem. What is the solution to this.
GSecur
There are a number of methods including , ssl tunnels, perhaps using a proxy on a non-standard port. (This is possible depending on the rules of your firewall.) To help us in narrowing down which technique he used we will need a bit more information. What tool did he download and use to circumvent your web filtering software?
AdmiralB
just patch it or use more stringent filtering software
Salvia
I do know public library's put their trust in Net Nanny.

But also how well do you need to lock the systems down? you could alsways install cyber cafe pro. and that will prevent them from making any local changes to the system.

We used ot use a system when I was in the navy... it was a server that all outbound and inbound traffic was monitored for key words, and when it was flagged with a threshold we set it at around 30 words to set the alarm off, it would record the username and time and date ect.

I cannot remember the name of it atm... if I think of it I will let you know. But pretty much there is no way for them to get around it. and you can do whatever reprimand is due.

btw you try to get those guys who say !! It was a popup, you can tell the guys who experience "popups" from the guys who actually surf it based off the amount pf content in their temporary internet files. <--- beleive it or not 80% of these people are to dumb to clean this folder out afterwords.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2005 Invision Power Services, Inc.