I'm not trying to scare anyone Richard. I'm stating that many are not doing the basics which have been discussed ad nauseum for over 30 years.
User profiles with default passwords and user profile objects that are not *public *exclude are two major holes that will sink the ship.
Steve Pitcher
iTech Solutions Group, LLC
p: (203) 744-7854 Ext. 176 | m: (902) 301-0810
www.itechsol.com | www.iInTheCloud.com
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Richard Schoen
Sent: Monday, May 3, 2021 4:48 PM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Subject: RE: So yeah...penetration tests
So rather than just trying to scare us, why not provide some helpful tips if you're not looking to sell anything ?
If it's meat and potatoes, we would all appreciate a few specific helpful tips so we can all work on being safe.
Regards,
Richard Schoen
Web:
http://www.richardschoen.net
Email: richard@xxxxxxxxxxxxxxxxx
------------------------------
message: 5
date: Mon, 3 May 2021 19:27:57 +0000
from: Steve Pitcher <SPitcher@xxxxxxxxxxxx>
subject: So yeah...penetration tests
Yes, this is a vendor post. Not selling anything. Just a friendly heads up to not be a statistic.
I have yet to perform an unsuccessful penetration test. Today I breached a customer's system and elevated my authority to *ALLOBJ in eight minutes. Eight. About as long as it takes to make a pot of coffee. Most of the time it takes anywhere from 30-120 minutes to breach a system.
No fancy tools. Nothing magical.
We as a community absolutely have to close our doors better. It's meat and potatoes security hardening.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com
midrange.com
