Re: [PEN-TEST] War Dialling

[mshines <mshines () purdue edu>]

An orgizational phone book?

PS.  Why would you only look at IT?   What about all those open user modems
on the desktop?

PPS.  There is a lot of history on this topic ... check out
http://www.securityfocus.com and then select Mailing Lists -> pen-test to
see past postings to this list (other lists sponsored by Security Focus are
also available there).

MSH
-----------------------------------
Michael S Hines
OS/390 Systems Programmer
Management Information
1061 Freehafer Hall
West Lafayette, IN 47907-1061
phone 765-494-5875
fax 765-496-1380




-----Original Message-----
From: Penetration Testers [mailto:PEN-TEST () SECURITYFOCUS COM]On Behalf
Of Scott, Mick
Sent: Thursday, November 16, 2000 7:00 AM
To: PEN-TEST () SECURITYFOCUS COM
Subject: War Dialling


Being a new member to this list I am not sure how much this topic has been
aired.  How ever I wonder if anyone has any ideas, or pointers on how they
would eliminate irrelevant numbers on a war dialling exercise.

If acme.com, a global company, has a very wide range of numbers how is it
best to seek out the numbers that are relevant to the IT departments.
Obviously there is the social engineering approach, however I am interested
in any other ideas.

Apologies if this has been discussed B4


Regards,
Mick