RE: Hacking demo - most spectacular techniques

["George Milliken" <gmilliken () farm9 com>]

Onbe suggestion,

Instead of netcat try the crypto version called 'cryptcat'.  This uses
twofish to make the netcat session unreadable with a sniffer.

It's at www.farm9.com, or in the debian linux distribution, or possibly on
SourceForge.

George


-----Original Message-----
From: Ilici Ramirez [mailto:ilici_ramirez () yahoo com]
Sent: Monday, October 01, 2001 12:53 AM
To: pen-test () securityfocus com
Subject: Hacking demo - most spectacular techniques


Hi all,

We intend to make a short demonstration of hacking as
part of a longer seminar with more than 100 IT
managers, vice-presindents, and other high-level
morons. The goal is to explain how easy is to hack an
unsecured system or network.

For them to understand and to realize how just only an
unsecured computer could lead to compromise of an
entire business we need to show some hacking examples
real spectacular.

So I need your help to make a top short list. I will
insert here my humble opinion, but I expect more from
all of you experienced pen-testers.

1. Remote VNC install - GUI session on target machine
2. BO2K or Subseven
3. Port redirection with fpipe - a firewall is not
always enough
4. Remote shell with netcat
5. Null session - information gathering with no right

Ilici R

__________________________________________________
Do You Yahoo!?
Listen to your Yahoo! Mail messages from any phone.
http://phone.yahoo.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/