Penetration Testing mailing list archives
Re: [PEN-TEST] War Dialling
From: Matthew Leeds <mleeds () CDDB COM>
Date: Thu, 16 Nov 2000 10:44:15 -0800
If you're doing a test with full assistance from the target, get a list of telcom providers from them, and an executed approval letter to get the Customer Service Records (CSRs) from each telcom provider. This will list all the telcom lines, both those that may terminate on a PBX, and all those old analog lines that everyone has forgotten about, but that may terminate on service modems for who knows what equipment. You may be surprised by what gets found. ---Matthew Leeds *********** REPLY SEPARATOR *********** On 11/16/00 at 11:59 AM Scott, Mick wrote:
Being a new member to this list I am not sure how much this topic has been aired. How ever I wonder if anyone has any ideas, or pointers on how they would eliminate irrelevant numbers on a war dialling exercise. If acme.com, a global company, has a very wide range of numbers how is it best to seek out the numbers that are relevant to the IT departments. Obviously there is the social engineering approach, however I am interested in any other ideas. Apologies if this has been discussed B4 Regards, Mick
Current thread:
- [PEN-TEST] War Dialling Scott, Mick (Nov 17)
- Re: [PEN-TEST] War Dialling mshines (Nov 17)
- Re: [PEN-TEST] War Dialling Lionel Ferette (Nov 17)
- Re: [PEN-TEST] War Dialling Steve (Nov 17)
- Re: [PEN-TEST] War Dialling Talisker (Nov 17)
- Re: [PEN-TEST] War Dialling Matthew Leeds (Nov 17)
- <Possible follow-ups>
- Re: [PEN-TEST] War Dialling Leibolt, Gregory, NBSO (Nov 17)
- Re: [PEN-TEST] War Dialling Michael Gough (Nov 17)
- Re: [PEN-TEST] War Dialling Meritt, Jim (Nov 20)