Re: Hacking to Xp box

[Max <Reply.to.list () acme com>]

I agree.

Juan, if it is your mission to show the CEO you can hack his machine, it 
is because you're the internal security expert AND hacker. Since you're 
the best hacker in your company, if you can't hack the CEO's machine it 
is because it is well protected.

However, as phugo pointed out, there are probably more interesting and 
more vulnerable machines in your network. You should concentrate on 
those to show your CEO that anyone with little security knowledge can 
access confidential data or compromise servers or read other people's 
email or whatever else you may find.

One thing that works really well for this type of demo, is to sit on the 
network with Cain ARP poisonning the gateway or mail or file server or 
proxy and looking at all the passwords it gathers.


M@x



phugo () highspeedweb net wrote:
> Hi,
> Shouldn't you try to penetrate something more important than the CEO box ?
> Aren't there any more important servers than CEO box ?
> In what aspect do you need better security ? Having a "good" antivirus
> protection, all patches, and firewalls enabled at desktops, doesn't look
> that bad security.
> Regards,
> Pedro
>
> -----Original Message-----
> From: Juan B [mailto:juanbabi () yahoo com] 
> Sent: quinta-feira, 1 de Setembro de 2005 6:46
> To: pen-test () securityfocus com
> Subject: Hacking to Xp box
>
> Hi Guys
>
> Please give me a hend here.
>
> Im trying to penetrate the CEO box to show him why we need better security
> in our company, he told me to show me how it can be done. he has xp pro sp 2
> with all the pathches installed and FW enbled but I cant ! I tried to use
> metasploit with the ms rpc dcom exploit but it didnt worked. nessus found
> port 135 139 2000 and ntp are opened and also he can read some smb shares
> and also outputed that this host doesnt disgard SYN packets that have the
> FIN flag set. and port 2000 (callback is open). 
> what I can try more to  break this box? any ideas? I know I allways can try
> to arp poison his arp table and pass all the machines traffic throw my
> laptop to capture some passwords but this is enough. or send him a
> trojan but we have a good anti virus protection  .    
>             
>                             
> Does some of you have Ideas ?
>
> Thanks a lot !
>
> Juan

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------