Socks 5 Proxy Detection
Info Nessus Network Monitor Plugin ID 3884
SynopsisThe remote host is acting as a Socks version 5 proxy.
DescriptionThe remote host is acting as a Socks version 5 proxy. This allows remote proxy clients to tunnel traffic through the host. This sort of behavior is somewhat commonplace on compromised hosts.
SolutionEnsure that the proxy is authorized with respect to corporate policies and guidelines.