Penetration Testing mailing list archives
Re: Generating awareness amongst IT staff
From: pand0ra <pand0ra.usa () gmail com>
Date: Sat, 25 Nov 2006 18:59:47 -0700
Break out Nessus and show them what a vulnerability scan looks like on a test server. Then use Metasploit to show them how easy it is to compromise the box. Try wireshark/favorite packet capture tool and show them how much fun it is to capture unencrypted traffic (preferably their password, which is probably one from a dictionary). Then grab a clue banana then beat them over the head with it. On 11/25/06, Faheem SIDDIQUI <fahimdxb () gmail com> wrote:
I am in the middle od preparing slides for security awareness presentation amongst IT staff (network admins/system/DBAs) etc. Security awareness is quite low amongst these guys and they seem to believe that the way have done it all these years, can continue all the remaining years too. Plan is, to create password hack using Ophcrack and run it during presentation. What else can I do to create real time engaging presentation so that these guys might sit up and take notice. How about doing a pen test on databases? Anyone has any ideas to make this presentation to largely IT technical staff...as engaging as possible? ------------------------------------------------------------------------ This List Sponsored by: Cenzic Need to secure your web apps? Cenzic Hailstorm finds vulnerabilities fast. Click the link to buy it, try it or download Hailstorm for FREE. http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW ------------------------------------------------------------------------
------------------------------------------------------------------------ This List Sponsored by: Cenzic Need to secure your web apps? Cenzic Hailstorm finds vulnerabilities fast. Click the link to buy it, try it or download Hailstorm for FREE. http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW ------------------------------------------------------------------------
Current thread:
- Default passwords dictionary Mohamed Abdel Kader (Nov 21)
- RE: Default passwords dictionary Yeh, Ivan I.C. (Nov 24)
- Re: Default passwords dictionary Mark Foster (Nov 24)
- Re: Default passwords dictionary Ron (Nov 24)
- Re: Default passwords dictionary Jerome Athias (Nov 24)
- Re: Default passwords dictionary Jeremy Saintot (Nov 24)
- Generating awareness amongst IT staff Faheem SIDDIQUI (Nov 25)
- Re: Generating awareness amongst IT staff pand0ra (Nov 25)
- Generating awareness amongst IT staff Faheem SIDDIQUI (Nov 25)
- RE: Default passwords dictionary hugh_fraser (Nov 24)
- RE: Default passwords dictionary Joxean Koret (Nov 24)
- <Possible follow-ups>
- Re: Default passwords dictionary carlos . spera (Nov 24)