Penetration Testing mailing list archives

Re: [PEN-TEST] Autocomplete Function


From: Oleg Letsinsky <letsinsky () MTU-NET RU>
Date: Tue, 14 Nov 2000 02:56:42 +0300

"Davidson,Sam" <SDAVIDSON () CERNER COM> writes:

Has anyone tried taking a sysdiff snapshot, then visiting some sites and
taking a diff shot to find the modified files?
This would be verrrry valuable info when compromised.
There is an easier way to check - grab a couple of monitors (file
system monitor and registry monitor) from www.sysinternals.com and
look what's going on when you fill an HTML form using stored
passwords.

--
People who think they know everything greatly annoy those of us who do.


Current thread: