Penetration Testing mailing list archives

Re: Vulnerability assessment for small business


From: email () neelsaxena com
Date: 28 Sep 2005 20:42:00 -0000

I performed a vulnerability assesment in a similar environment. It was Windows so I ran MSBA against all the machines 
on the LAN together. Luckily all local admin passwords were the same. 

I'd question why they have 25 different pcs in a peer-to-peer topology.  Doesn't seem very efficient.  Especially when 
it comes to security patch deployment.  Do the users go to their own machine one by one to apply patches?  That's 
probably too cumbersome and you'll proibably find missing patches on a number of those machines.  You vuln assesment 
could include security process and procedures.  

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------


Current thread: