Sounds like the sort of job I could do... Did they find any security holes? You sure that this wasn't a whajimacallit - attack - psychological - ermmm there's a word for this type of scam.
(feedingtimeatthezoo day 1 of his bikini diet started, Fri 14 Oct 2011, 17:11, 2 replies)

After I made a lot of noise about how there was no chance in hell I was sending a third party a list of all our sensitive passwords
I got an email from the IT director basically ordering me to send them anyway. I have a copy of that email printed and pinned next to my monitor as arse-covering material, should all this turn around and blow up in my face.
( emvee cruor deo cruoris, Fri 14 Oct 2011, 17:13, closed)

I believe it's referred to as 'social engineering'. I've a mate in the pen testing game - and while he's done many, many rather interesting things, I'm not sure he's ever been so brazen as to simply ask the web admin for the passwords...
( Happy Phantom has been to Hastings, Brighton, and Eastbourne too, Fri 14 Oct 2011, 17:19, closed)

"The art of deception"
by Kevin Mitnick (I think) is a pretty good read. It's all about social engineering, and how he was portrayed as a technical hacker (and subsiquently locked up for 8 years with no trial), when in reality all he did was trick people into giving him passwords.
(dchurch bah, Fri 14 Oct 2011, 21:53, closed)