Re: Evil autorun CD - ideas ? downloadable exploits anywhere ?

From: Chris Kuethe (chris.kuethe@gmail.com)
Date: Wed May 02 2007 - 23:04:26 EDT


On 5/2/07, Shenk, Jerry A <jshenk@decommunications.com> wrote:
> Now, rooting every box that runs the CD...that would be even more
> interesting...but, if it's part of a pen-test, I'm not sure where the
> problem would be...a user taking the CD home would definitely be
> interesting...might be a little tough to keep that in scope. Maybe put
> a warning label on it not to remove it from the building;)

If you're already grabbing net info, do a basic check to see if you're
running on the authorized corporate net.

if not, just autoeject the cd... or if it's a rewritable cd, try to
erase the cd.

CK

-- 
GDB has a 'break' feature; why doesn't it have 'fix' too?
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!
http://www.cenzic.com/c/2020
------------------------------------------------------------------------


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:45 EDT