From: jasonisnow@gmail.com
Date: Fri Jul 20 2007 - 12:01:56 EDT
I have a situation where a user at a client is bypassing a proxy, changing his local routing table and internet browsing through a local modem, connected to a fax machine. Is there any way to to craft a packet to verify this is happening - stimulus/response type action? I've spoofed packets to see if he has his machine set up to auto-dial the modem when it sees traffic destined for a non-local subnet...
Obviously we don't want the user to know what we're doing...
Any stealthy ideas?
-->j
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Swap Out your SPI or Watchfire app sec solution for
Cenzic's robust, accurate risk assessment and management
solution FREE - limited Time Offer
http://www.cenzic.com/c/wf-spi
------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:57 EDT