Penetration Testing mailing list archives

Re: Testing the user community


From: Schanulleke <schalulleke () gmail com>
Date: Thu, 01 Feb 2007 15:55:07 +0100

webmaster () absolutenetworks biz wrote:
We all know our weak link but how do you identify just how weak they are? I 
think it's time to pen test my user community and have a couple ideas to gather 
statistics on just how nonaware they really are. 
What is the point you are trying to make, what is the goal you are
trying to achieve?
Maybe a simple phishing scam 
and bogus email with a fake virus attachment that emails me when it's opened so 
I can track how many folks actually opened it.  Has anyone ever done this 
before? I can't find any information about it on the web.. thoughts and ideas 
anybody?

  
It all has been done before for real. THere are plenty of real examples
out there. If you have AV check how often it is triggered. Or are you
really trying to prove that your users at 1d10ts?

Frank

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


Current thread: