alt Hacker NewsThe pentesters wouldn't have to actually pwn a laptop, just getting the employee to download and run anything could go in a report without having the file actually be malicious.
The pentesters wouldn't have to actually pwn a laptop, just getting the employee to download and run anything could go in a report without having the file actually be malicious.
Would they have legal right to do that, out of curiosity?
Hired oentest has company permission to do stuff on company property. I do not imagine they have right to do so to personal property.