On 9/28/07, <b class="gmail_sendername">Simon Smith</b> <<a href="mailto:simon@snosoft.com">simon@snosoft.com</a>> wrote:<div><span class="gmail_quote"></span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
-----BEGIN PGP SIGNED MESSAGE-----<br>Hash: SHA1<br><br>Right,<br> It set off alarms with all of my penetration testers hence why we're<br>researching it. The question I have is, has anyone seen port 31337<br>respond with the .NET REMOTING banner? Our nmap -A claims that it is
<br>.NET REMOTING... just seems weird...<br><br>Anyone know of any backdoors that do that?<br><br></blockquote></div><br>Any decent programmer can write that into their application. Be worried.<br><br>Fabrizio<br>