From: DokFLeed (dokfleed@dokfleed.net)
Date: Mon Sep 27 2004 - 10:10:13 EDT
Jaun,
I have no idea how you got the "Mcse Ccna Ccsa Scsa"
tailing your name,
first of all you are not authorized to do this, in a decent company you
should get fired,
second, you had just exposed your company by posting the phone number
third, LEARN first what SNMP , then pen-test it .
I ran to security bizness coz I got sick of new IT comers, and for a while I
though none of them will dare to join the security bizness unless they feel
they are competitive. It took me 16 years before I can say yes I know
something about Security..
when you fix all of that you might be able to pen-test anything, I hope u
got my point
=========================
----- Original Message -----
From: "R. DuFresne" <dufresne@sysinfo.com>
To: "Juan B" <juanbabi@yahoo.com>
Cc: <pen-test@securityfocus.com>
Sent: Saturday, September 25, 2004 12:39 AM
Subject: Re: snmp
>
> You start by getting yer "get out of jail free card" from mgt. If you
> lack that, you are likely to get fired and then prosecuted.
>
> thanks,
>
> Ron DuFresne
>
> On Wed, 22 Sep 2004, Juan B wrote:
>
>> HI,
>>
>>
>>
>> I am responsible of the security in my company.
>>
>>
>>
>> One of the sysadmins told me that they use in one of
>> the networks Snmp and that the community is public.
>>
>>
>>
>> I want to pen test this issue meaning that I want to
>> find ways to retrieve from the devices info, and show
>> the IT manager that he must change the community.
>>
>>
>>
>> The reason that I want to do It my self is that I
>> don't believe in the way that is just going to him and
>> tell him..." its written in the internet that we must
>> change public community to something else.
>>
>>
>>
>> So how or from where do I start ?
>>
>>
>>
>> Thanks
>>
>>
>>
>> juan
>>
>> =====
>> Juan Fernandez.
>>
>> Security Engineer
>>
>> Tel: +972-52-4306781
>> Mcse Ccna Ccsa Scsa
>>
>>
>>
>>
>> __________________________________
>> Do you Yahoo!?
>> New and Improved Yahoo! Mail - 100MB free storage!
>> http://promotions.yahoo.com/new_mail
>>
>> ------------------------------------------------------------------------------
>> Ethical Hacking at the InfoSec Institute. All of our class sizes are
>> guaranteed to be 12 students or less to facilitate one-on-one interaction
>> with one of our expert instructors. Check out our Advanced Hacking
>> course,
>> learn to write exploits and attack security infrastructure. Attend a
>> course
>> taught by an expert instructor with years of in-the-field pen testing
>> experience in our state of the art hacking lab. Master the skills of an
>> Ethical Hacker to better assess the security of your organization.
>>
>> http://www.infosecinstitute.com/courses/ethical_hacking_training.html
>> -------------------------------------------------------------------------------
>>
>
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> admin & senior security consultant: sysinfo.com
> http://sysinfo.com
>
> "Cutting the space budget really restores my faith in humanity. It
> eliminates dreams, goals, and ideals and lets us get straight to the
> business of hate, debauchery, and self-annihilation."
> -- Johnny Hart
>
> testing, only testing, and damn good at it too!
>
>
> ------------------------------------------------------------------------------
> Ethical Hacking at the InfoSec Institute. All of our class sizes are
> guaranteed to be 12 students or less to facilitate one-on-one interaction
> with one of our expert instructors. Check out our Advanced Hacking course,
> learn to write exploits and attack security infrastructure. Attend a
> course
> taught by an expert instructor with years of in-the-field pen testing
> experience in our state of the art hacking lab. Master the skills of an
> Ethical Hacker to better assess the security of your organization.
>
> http://www.infosecinstitute.com/courses/ethical_hacking_training.html
> -------------------------------------------------------------------------------
>
>
>
------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
-------------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:06 EDT