If he has local admin rights to the box, send him an email and trick him
into downloading something.
Pretend to be a Janitor and get physical access to the building.
If there are company secrets/databases on a laptop, steal the laptop.
Just a question here...
XP sp2
All patches
Firewall enabled
You obviously think that isn't enough... what do 'you' think needs to be
done for better security? Where do you think the low hanging fruit is?
The weakest link? The lowest common denominator and all the cliches?
Heck if there's 98/NT's in that network and 135-139 is open....lmhash
anyone? How good are the passwords?.. I'll betcha THAT's your weakest
link. Lift up the keyboard...see if it's stuck under the keyboard on a
post-it note.
Max wrote:
I agree.
Juan, if it is your mission to show the CEO you can hack his machine,
it is because you're the internal security expert AND hacker. Since
you're the best hacker in your company, if you can't hack the CEO's
machine it is because it is well protected.
However, as phugo pointed out, there are probably more interesting and
more vulnerable machines in your network. You should concentrate on
those to show your CEO that anyone with little security knowledge can
access confidential data or compromise servers or read other people's
email or whatever else you may find.
One thing that works really well for this type of demo, is to sit on
the network with Cain ARP poisonning the gateway or mail or file
server or proxy and looking at all the passwords it gathers.
M@x
phugo@highspeedweb.net wrote:
Hi,
Shouldn't you try to penetrate something more important than the CEO
box ?
Aren't there any more important servers than CEO box ?
In what aspect do you need better security ? Having a "good" antivirus
protection, all patches, and firewalls enabled at desktops, doesn't look
that bad security.
Regards,
Pedro
-----Original Message-----
From: Juan B [mailto:juanbabi@yahoo.com] Sent: quinta-feira, 1 de
Setembro de 2005 6:46
To: pen-test@securityfocus.com
Subject: Hacking to Xp box
Hi Guys
Please give me a hend here.
Im trying to penetrate the CEO box to show him why we need better
security
in our company, he told me to show me how it can be done. he has xp
pro sp 2
with all the pathches installed and FW enbled but I cant ! I tried to
use
metasploit with the ms rpc dcom exploit but it didnt worked. nessus
found
port 135 139 2000 and ntp are opened and also he can read some smb
shares
and also outputed that this host doesnt disgard SYN packets that have
the
FIN flag set. and port 2000 (callback is open). what I can try more
to break this box? any ideas? I know I allways can try
to arp poison his arp table and pass all the machines traffic throw my
laptop to capture some passwords but this is enough. or send him a
trojan but we have a good anti virus protection .
Does some of you have Ideas ?
Thanks a lot !
Juan
------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:
Hackers are concentrating their efforts on attacking applications on
your website. Up to 75% of cyber attacks are launched on shopping
carts, forms, login pages, dynamic content etc. Firewalls, SSL and
locked-down servers are futile against web application hacking. Check
your website for vulnerabilities to SQL injection, Cross site
scripting and other web attacks before hackers do! Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------
--
Letting your vendors set your risk analysis these days?
http://www.threatcode.com
------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:
Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------
