Penetration Testing mailing list archives

RE: Revealing Username & Password Quark 6.0


From: Edgar Romero <edgar.romero () sciron us>
Date: 05 May 2007 16:55:29 -0600

Just ask him, no matter how bad the situation was I am sure he will give it to you. Swollow your pride, let him have 
one last laugh. Find someone he associated with frequently and have them ask him. Social engineer him, get what you 
need, then secure your systems. Make sure you change pw on system and bot accounts as well.

-----Original Message-----
From:  s-williams () nyc rr com
Date:  5/5/07 2:48 pm
To:  listbounce () securityfocus com,  pen-test () securityfocus com
Subj:  Revealing Username & Password Quark 6.0

Hello list,

We just changed system admins at my job and no one knows the username and password for our Quark Xpress licsening 
system  program. This program manages all the users who has rights to use the application, and if we have a new student 
we need to log in and create an account for the  student,  so the can be able to use the app.

Has anyone audited this application before?
"A wise man ask questions, a fool is afraid of knowledge"

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


Current thread: