Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]

RE: listening to people/offices when on-hold on the phone

Subject: RE: listening to people/offices when on-hold on the phone
Date: Fri, 22 Jun 2007 15:55:34 -0800
Shoot a email asking for the call.

Receive call, put on hold.

Cause a conflict on the callers end somehow, some way.

Listen...

Maybe offer to fix...

Hehe,

--ep



-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com] On
Behalf Of ebk_lists@hotmail.com
Sent: Friday, June 22, 2007 10:11 AM
To: pen-test@securityfocus.com
Subject: Re: listening to people/offices when on-hold on the phone

This has sorta happened to me. I was on "hold" with our higher SOC for a
terribly long time, and I started complaining. I didn't realize that they
could hear me/were still listening. But I didn't even have the luxury of
Beethoven. :(

I agree it's an interesting concept, but I don't know how much value you
would actually gain by doing it. You would need some sort of bait to have
your mark call you and/or stay on the line long enough for you to collect
any data that you might be able to get.

Another potential is using this idea:

http://www.theinternetpatrol.com/keyboard-sound-spying-gives-away-whats-bein
g-typed

Get them on the phone, and get them to log in to their account, do something
else that requires typing their password. Perhaps you can record the
keystrokes and determine what it is?

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic See HOW Now with our 20/20
program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>