3 Comments

1. "Penetration Testing (pen-test) Mailing List" says:

   April 28, 2009 at 10:43 am

   Re: Corporate Intranet

   Posted by Christian Eric Edjenguele on Apr 28

   iadcc wrote:
   > Has anybody done a penetration test, in trying to access a companies
   > corporate intranet, from outside the Network? If so can you give me some
   > pointers how you attempted to do so?

   Hello, Internet Explorer 7+ can break into companies intranet, by
   manipulating the…

   URL: http://seclists.org/pen-test/2009/Apr/0176.html

2. "Penetration Testing (pen-test) Mailing List" says:

   April 30, 2009 at 1:02 pm

   Re: Corporate Intranet

   Posted by Zack Payton on Apr 30

   Yo,

   Use the recent DNS vuln on their resolving DNS server, overwrite the
   record for google.com with a webserver you control… load up activex
   or flash/java/script app that calls home and sets up some kind of
   proxy server or vpn tunnel back to you and use that to pwn all.

   Quick, easy, and…

   URL: http://seclists.org/pen-test/2009/Apr/0198.html

3. "Penetration Testing (pen-test) Mailing List" says:

   May 7, 2009 at 12:32 pm

   Re: Corporate Intranet

   Posted by Steve Pinkham on May 7

   On Monday 04 May 2009 11:15:21 am Adriel T. Desautels wrote:
   > It just shows how much skill really exists in our industry…
   >
   >
   > so… yes. 🙂

   In fact, the major point of the whole field of pen testing is the qualification
   of risk, and in general the "white hat"…

   URL: http://seclists.org/pen-test/2009/May/0022.html