pen-test
[Top] [All Lists]

Re: Boot floppy

To: pen-test@securityfocus.com
Subject: Re: Boot floppy
From: Juergen Fiedler <juergen@fiedlerfamily.net>
Date: Wed, 11 Apr 2007 15:46:28 -0400
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
In-reply-to: <a40a81bbdf22981ceda4eda9f6055765@stangercorp.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mail-followup-to: pen-test@securityfocus.com
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <a40a81bbdf22981ceda4eda9f6055765@stangercorp.com>
Resent-date: Wed, 11 Apr 2007 14:55:50 -0600 (MDT)
Resent-from: pen-test-return-1078483924@securityfocus.com
Resent-message-id: <20070411205550.97060152FAD@outgoing2.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
User-agent: Mutt/1.5.9i
On Tue, Apr 10, 2007 at 10:07:09AM -0500, Mifa wrote:
> We have a user who takes a company  computer home with them (no its not a lap 
> top).  We have a good reason to need to look at their files.  However, we 
> want to do so without that employ knowing.  They seem to know something about 
> security becasue auto runs is disabled and the workstation is always locked 
> with a third party software.  INserting a U3 drive will not run a program 
> either.  Are there any programs that will boot from a floppy then copy a 
> program to the c drive then wite an auto start entry into the registry?  This 
> was the only way I can think of to get the user to install a program..
> 
> Any other ideas how we maight gain access?  It has to be fast (bathroom 
> breaks ect).  I dont have time to load a live cd. Further, robooting would 
> cause the user to loose work.

Restore a recent backup of his machine to a different host. You do
keep regular backups of all machines, right?

 --j

Attachment: signature.asc
Description: Digital signature

<Prev in Thread] Current Thread [Next in Thread>