Re: [PEN-TEST] War Dialling

[Talisker <Talisker () NETWORKINTRUSION CO UK>]

Mick
> If acme.com, a global company, has a very wide range of numbers how is it
> best to seek out the numbers that are relevant to the IT departments.
The IT dept should be wise enough not to install rogue modems (hehe did I
really say that!) I would look at the whole range.  Out of interest a BT (UK
telephone company) rep told me that they can place wardial detectors on
exchanges, just something to be aware of - so as you don't upset them when
you start your test

Furthermore, I have a page of wardialers on my website if anyone knows of
any that I'm missing please let me know - only good freeware ones though,
otherwise we'd be up to our armpits in them

And finally for those that aren't aware a have set up a low volume
security-tools
notification service, as I am made aware of new or updated tools I pass the
info on, I'm currently bundling the tools onto a single weekly email
http://www.egroups.com/subscribe/security-tools

Cheers
Andy
 http://www.networkintrusion.co.uk
Talisker's Network Security Tools List
                    '''
                 (0 0)
  ----oOO----(_)----------
  | The geek shall        |
  |  Inherit the earth     |
  -----------------oOO----
               |__|__|
                  || ||
              ooO Ooo
talisker () networkintrusion co uk

The opinions contained within this transmission are entirely my own, and do
not necessarily reflect those of my employer.





----- Original Message -----
From: "Scott, Mick" <Mick_scott () UK IBM COM>
To: <PEN-TEST () SECURITYFOCUS COM>
Sent: Thursday, November 16, 2000 11:59 AM
Subject: [PEN-TEST] War Dialling


> Being a new member to this list I am not sure how much this topic has been
> aired.  How ever I wonder if anyone has any ideas, or pointers on how they
> would eliminate irrelevant numbers on a war dialling exercise.
>
> If acme.com, a global company, has a very wide range of numbers how is it
> best to seek out the numbers that are relevant to the IT departments.
> Obviously there is the social engineering approach, however I am
interested
> in any other ideas.
>
> Apologies if this has been discussed B4
>
>
> Regards,
> Mick