Penetration Testing: RE: Winning Hearts and Minds

["Andy Cuff" <lists () securitywizardry com>]

Just to clarify, as was pointed out on by another subscriber, the use of a
privileged account alongside an online service may require some precautions
to be taken or a great deal of trust ;)

Regards
Andy Cuff
Managing Director / CEO
Computer Network Defence Ltd
www.SecurityWizardry.com


> -----Original Message-----
> From: listbounce () securityfocus com 
> [mailto:listbounce () securityfocus com] On Behalf Of Andy Cuff
> Sent: 04 May 2007 20:01
> To: pen-test () securityfocus com
> Subject: Winning Hearts and Minds
>
> Afternoon,
> The discussion on USB devices on the basics list, prompted me 
> to report on GFI's FREE Online USB scanner 
> http://www.securitywizardry.com/endpoint.htm#freegfi
>
> Back in the 90's I found that a quick squirt using l0phtcrack 
> was a great way to win the hearts and minds of system owners 
> to Information Security and open their ears.  Obviously these 
> days enabling password complexity is trivial and cracking 
> complex passwords pointless (mostly), therefore password 
> cracking doesn't have the same effect. VA tools tend to 
> switch off interest, therefore what do we do?  I saw the 
> above scanner as another Hearts and Minds tool, in that it 
> will show the owner what USB devices have ever been on a 
> given system from Mass Storage to iPods, I'm sure it can be 
> defeated however it wakes them up.
>
> What other Hearts and Minds tools do Pen Testers use for 
> grabbing attention??
>
> Regards
> Andy Cuff
> Managing Director / CEO
> Computer Network Defence Ltd
> www.SecurityWizardry.com
>
>
> --------------------------------------------------------------
> ----------
> This List Sponsored by: Cenzic
>
> Are you using SPI, Watchfire or WhiteHat?
> Consider getting clear vision with Cenzic See HOW Now with 
> our 20/20 program!
>
> http://www.cenzic.com/c/2020
> --------------------------------------------------------------
> ----------

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------