Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: physical security pentesting procedures, tips, audit programs?

from [nicola] Network Security [Permanent Link]
Subject: Re: physical security pentesting procedures, tips, audit programs?
Date: Sat, 11 Dec 2004 15:03:13 +0100 (CET) 
On Thu, 2004-09-12 at 21.18, Frank Knobbe wrote:


Sure, but you show it to management/sponsor. You don't show it to the
people affected unless they are involved in a test (like branch managers
having you detained in their office).



Penetration Testing is all about showing flaws, but to the sponsor, not
the folks who commit the violations. It's the responsibility of the
sponsors to take action in a way they see fit.



Discretion is paramount in these engagements. You just don't leave stuff
behind.


I'm agree with Frank...in a physical security test, discretion is very
important..then, what about using the so called "password pen"?

Watch this:
http://www.softwareandstuff.com/CES10368.html

With this pen you can write on any surface with invisible to the naked eye
ink; when you point an UV light on the area you wrote, your tag will
appear.
Imho discreet and effective.

Bye
Nicola
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  MS IE User's Authentication Details (userid/password) Sharing Issue, Debasis Mohanty
Next by Date:  Re: Laptop Considerations, calvin maready
Previous by Thread:  RE: physical security pentesting procedures, tips, audit programs?, Frank Knobbe
Next by Thread:  Administriva - of sorts, Alfred Huger
Indexes:  [Date] [Thread] [Top] [All Lists]