Re: [vox-tech] Cracking...

[Mark Kim <mkkim@ucdavMAPSis.edu>]

On Fri, 1 Dec 2000, Peter Jay Salzman wrote:

> > The web server doesn't have any CGI programs on it.
>  
> ok, but you should at least try.  the advisory did say that this cgi comes
> packaged, by default, with thttpd.   for all you know, bishop doesn't even
> know it's on the system.

It's one of the first things I tried.  And Bishop explicitly told us that
he knows about the ssi exploit when we complained that he wasn't putting
up any CGI programs.

> > All social engineering cracking techniques need to be approved by the
> > professor...
> 
> did he explicitly state this?

Yes.  I asked him about social engineering and that's what he told us.

> > I'm sure he won't fall for "will you leave the room for a
> > minute" technique right after I tell him what I'm going to do :P
>  
> with a little imagination, i'll bet he would.  be creative!   get the
> department secretary into the picture.  or one of his TA's.  the
> possibilities are endless...

Well... I really wouldn't be learning anything technical...

---
Mark K. Kim
http://www.cbreak.org/mark/
PGP key available upon request.