Penetration Testing mailing list archives

Re: Boot floppy


From: "berg" <zealberg () 163 com>
Date: Wed, 11 Apr 2007 13:59:49 +0800

Replace a program to trojan which is auto-started by Windows but not such important, just like Microsoft IME or 
Realplayer sch.



Best Regards
Berg
----- Original Message ----- 
From: "Mifa" <mifa () stangercorp com>
To: <pen-test () securityfocus com>
Sent: Tuesday, April 10, 2007 11:07 PM
Subject: Boot floppy


We have a user who takes a company  computer home with them (no its not a lap top).  We have a good reason to need to 
look at their files.  However, we want to do so without that employ knowing.  They seem to know something about 
security becasue auto runs is disabled and the workstation is always locked with a third party software.  INserting a 
U3 drive will not run a program either.  Are there any programs that will boot from a floppy then copy a program to 
the c drive then wite an auto start entry into the registry?  This was the only way I can think of to get the user to 
install a program..

Any other ideas how we maight gain access?  It has to be fast (bathroom breaks ect).  I dont have time to load a live 
cd. Further, robooting would cause the user to loose work.



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


Current thread: