Penetration Testing mailing list archives

Re: Boot floppy


From: "Danyelle Gragsone" <ladynikon () gmail com>
Date: Wed, 11 Apr 2007 14:45:40 -0400

If this is a company computer.  The user shouldn't have third party
blocks on it anyways.  Even if the user takes home the computer you
should still be able to gain access to it.  What does your policy say
about personal use of a company computer?  Most companies have some
sort of policy against non company software installed on the computer.

On 4/11/07, Sat Jagat Singh <flyingdervish () yahoo com> wrote:
This should be dealt with through policies and
procedures concerning how systems are managed.  At the
very least, I would address it with the user's direct
supervisor or dept. head.  If IT has no basis in
organizational policy for control over such systems
and the user's own manager won't reign them in, you
have no legal leg on which to stand.  If
organizational policy says that you have the right to
control the config of the machine then, again, you
need to take up your concerns about this user's
behavior with the responsible authority.
--- Mifa <mifa () stangercorp com> wrote:

> We have a user who takes a company  computer home
> with them (no its not a lap top).  We have a good
> reason to need to look at their files.  However, we
> want to do so without that employ knowing.  They
> seem to know something about security becasue auto
> runs is disabled and the workstation is always
> locked with a third party software.  INserting a U3
> drive will not run a program either.  Are there any
> programs that will boot from a floppy then copy a
> program to the c drive then wite an auto start entry
> into the registry?  This was the only way I can
> think of to get the user to install a program..
>
> Any other ideas how we maight gain access?  It has
> to be fast (bathroom breaks ect).  I dont have time
> to load a live cd. Further, robooting would cause
> the user to loose work.
>
>
>
>
------------------------------------------------------------------------
> This List Sponsored by: Cenzic
>
> Need to secure your web apps?
> Cenzic Hailstorm finds vulnerabilities fast.
> Click the link to buy it, try it or download
> Hailstorm for FREE.
>
>
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
>
------------------------------------------------------------------------
>
>




____________________________________________________________________________________
Now that's room service!  Choose from over 150,000 hotels
in 45,000 destinations on Yahoo! Travel to find your fit.
http://farechase.yahoo.com/promo-generic-14795097

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


Current thread: