I have been asked to test out any security holes for a company. I created an email account that looks similar to their IT department's address and everybody is complying :) I have only asked them to send me some simple things like their WAN IPs. I want to take it a step further though, perhaps some backdoor access? or a few files off their computer? Nothing malicious, white-hat stuff etc..
What do you guys recommend I ask for in the next email?