Full Disclosure mailing list archives

Re: Need help in performing a remote vulnerability scan


From: Valdis.Kletnieks () vt edu
Date: Thu, 26 Feb 2004 10:46:19 -0500

On Wed, 25 Feb 2004 23:01:42 EST, Byron Copeland said:
Sure...

I'd send them all a CD with an autorun file on it that would install any
agent that you desired.

Make note of which remote sites do it without calling you on the phone and
verifying *all* of the following:

1) That you're the one who sent the CD
2) That HQ hired you as a security consultant
3) That HQ has already verified both 1 *and* 2.

Any sites that don't do that, tell HQ to have a chat with them about "social
engineering"....

Attachment: _bin
Description:


Current thread: