OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-disclosure] Putty Proxy login/password discolsure....

Valdis.Kletnieksvt.edu
Date: Thu Nov 02 2006 - 07:28:15 CST


On Thu, 02 Nov 2006 01:15:19 CST, nocfed said:

> And if you have physical access then you can simply use a floppy, usb
> dongle, or any other type of removable media to boot from. Once
> physical access is obtained then you pretty much have full access,
> barring full disk encryption.

For bonus points, figure out how to reboot the machine without being
detected. For starters, there's that pesky 'uptime' ;)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFFSfJvcC3lWbTT17ARAhETAJ9rbe5GLz4hJ4XSE+KjOh5qZrFguwCeMxPy
3GABiVJbuAxhdUH2q/GWZ+Q=
=lLoK
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/