Re: Vulnerability assessment for small business

[Susan Bradley <sbradcpa () pacbell net>]

Advice them to get a server for heavens sake.  25 PCs ... peer and no 
SERVER?  No AD?


Jason Albuquerque wrote:

> A program (pay for) called BELARC ADVISOR can run a full audit of all
> machines on your network=2E=2E=2E=2E
> It will give you a report on each machine giving you OS, apps, patch
> levels for OS and Apps, logins, hardware audit=2E=2E=2E=2E=2E=2E=2E=2E and much much
> more=2E=2E=2E=2E=2E=2E=2E=2E=2E=2E=2E
>
>
> Jason Albuquerque
>
> GIS Manager
>
> Department of Information Systems
>
> 80 Boston Neck Road
>
> Town of North Kingstown, RI 02852
>
> Tel=2E (401) 268=2D1516
>
> Fax (401) 295=2D2594
>
> www=2Enorthkingstown=2Eorg
>
> "There are 10 kinds of people in this world=2E The ones who understand
> binary and the ones who don't=2E"
>
> =2D=2D=2D=2D=2DOriginal Message=2D=2D=2D=2D=2D
> From: Billy Dodson [mailto:billy@pmicromart=2Ecom] 
> Sent: Tuesday, September 27, 2005 5:34 PM
> To: pen=2Dtest@securityfocus=2Ecom
> Subject: Vulnerability assessment for small business
>
>
>
> When doing a vuln assessment for a small business (25 PC's, no server)
> which is using a peer=2Dto=2Dpeer windows network, how do you approach this?
> Say the customer has a firewall=2E=2E=2Ebut they don't host any services=2E  All
> of the PC's have local usernames and passwords that vary from machine to
> machine=2E  There is no one single administrator account across the board,
> and you have little time=2E  So you cant run many automated tools to check
> patch levels and what not because you cant get remote access to the
> registry=2E  There are no services to be tested from the outside=2E  Do you
> manually go to each machine and test them individually?  Of course you
> can run null scans on the LAN, but that is not going to provide the
> depth you need=2E  Any ideas and pointers would be great=2E
>
> =2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D
> =2D=2D=2D=2D=2D=2D
> Audit your website security with Acunetix Web Vulnerability Scanner: 
>
> Hackers are concentrating their efforts on attacking applications on
> your 
> website=2E Up to 75% of cyber attacks are launched on shopping carts,
> forms, 
> login pages, dynamic content etc=2E Firewalls, SSL and locked=2Ddown servers
> are 
> futile against web application hacking=2E Check your website for
> vulnerabilities 
> to SQL injection, Cross site scripting and other web attacks before
> hackers do! 
> Download Trial at:
>
> http://www=2Esecurityfocus=2Ecom/sponsor/pen=2Dtest_050831
> =2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D
> =2D=2D=2D=2D=2D=2D=2D
>
>
>
> =2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D
> Audit your website security with Acunetix Web Vulnerability Scanner: 
>
> Hackers are concentrating their efforts on attacking applications on your 
> website=2E Up to 75% of cyber attacks are launched on shopping carts, forms, 
> login pages, dynamic content etc=2E Firewalls, SSL and locked=2Ddown servers are 
> futile against web application hacking=2E Check your website for vulnerabilities 
> to SQL injection, Cross site scripting and other web attacks before hackers do! 
> Download Trial at:
>
> http://www=2Esecurityfocus=2Ecom/sponsor/pen=2Dtest_050831
> =2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D=2D
>
>
>
>  

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------