An attempt to penetrate a system's security in an effort to evaluate the protections in place.
0
votes
0answers
279 views
How to do a penetration test on an iOS application? [closed]
I have newly started pentesting of iOS apps. I need a pointer about what are the basic checklist should I follow while carrying out iOS apps pentest.
Suggestion of tools and methodologies to carry ...
0
votes
1answer
163 views
What type of attacks can be carried on for an web application [closed]
My company has designed an web application and its going to be hosted soon, I would like to know what type of attacks can be carried on the web application to test the security of my web application
...
6
votes
4answers
463 views
Why is penetration testing important
In improving the security of an organization, it seems as though an audit of existing code, procedures, policies, infrastructure, etc. would be absolutely sufficient to reveal any security or policy ...
0
votes
0answers
72 views
Web application scanners that output reports? [closed]
I've been poking around the web looking for a web app security scanner I could introduce into by build/QA process to pick up some of the common issues in my applications. The tricky part is that I ...
2
votes
5answers
4k views
Nexus 7 (Or any other good android tablets) For pen testing
I'm considering investing in an android tablet for pen testing. Does anyone know how capable they are with pen testing? Can they compile code or forward packets? Are any applications that work on ...
7
votes
5answers
397 views
How do small businesses handle web app security?
Everything on Owasp's top 10 list, how do current small businesses (< 1000 employees) handle web application security, along with mobile security of their applications?
Do they care about info/app ...
2
votes
3answers
238 views
What things should a penetration tester know about databases?
I want to start learning about databases from pentesters perspective and I would like to know what things will be useful on the long run . Also do you know any good book to kickstart my experience at ...
2
votes
1answer
238 views
Using mysql root account to execute root commands
Suppose that I have full root access to mysql databases, but not root user shell (linux). How can I use the full root access to mysql databases to execute root commands?
7
votes
3answers
854 views
How does BeEF work? (working understanding)
I have recently come across the BeEF- a browser exploitation tool. In most of the articles, it is said time and again that it is developed for research and pen test purposes! Has anyone worked with ...
0
votes
0answers
214 views
Penetration testing in a secure environment [closed]
Sorry for the confusing question earlier. I have edited it to make it to be more in accordance with the site.
I am conducting a penetration test on a network where they have Windows 2008 R2 for all ...
0
votes
1answer
631 views
Is OSX or Mac hardware used in the InfoSec world? What resources are available? [duplicate]
Possible Duplicate:
Mac OS X from an IT Security Practitioners' Perspective?
I'm new to the OSX world (formerly Windows background) and am interested in understanding what is or isn't ...
0
votes
1answer
385 views
Telnet local privilege escalation exploits possible even when telnet is running under a normal user account?
http://www.exploit-db.com/exploits/8055/ says:
The telnet protocol allows to pass environment variables inside the
telnet traffic and assign them to the other side of the tcp connection.
The ...
0
votes
1answer
211 views
How have DNS recursion attacks happened?
There are a few resources describing how to carry out DNS recursion attacks. Is there any good explanation to help me understand how these attacks work and if systems on my network are still ...
19
votes
6answers
4k views
What defines a programming language as useful for hacking?
I know that scripting languages (Perl, Ruby, Python, javascript, and even Lua!!!) are most suitable for hacking and penetration testing.
My question is: What is it that makes those languages ...
2
votes
0answers
384 views
Hack scenario when a person has a non-superuser shell [closed]
Suppose that there are following three machines in the network:
Machine A:
Microsoft Server 2003 Service Pack 2
FileZilla 0.9.29 beta ftp server (TCP 21)
Mcafee ePolicy server (81), remote desktop ...
0
votes
1answer
920 views
can an attacker find WPA2 passphrase given WPA key data and WPA MIC
Can some one with these two pieces of information get a hold of the psk key, or its a blind attack that can be done using dictionaries or/and word-lists ?
If so please add some resource like a link ...
2
votes
6answers
1k views
Efficient way for finding XSS vulnerabilities?
Manual (reliable) way: Put string containing characters that have special meaning in HTML into some parameter of HTTP request, look for this string in HTTP response (and possibly) in other places ...
6
votes
2answers
757 views
How to prepare for a career in Pen-Testing
I am currently a sophmore in Penn State's SRA:ICS program (Cyber Security) and IST:Dev program. My goal is that when I graduate I can become a Pen-Tester. I'm looking for advice on how to learn how to ...
5
votes
4answers
741 views
MDK3 warns about WPA2 downgrade - how do I find the key in Wireshark?
While stress testing my router using MDK3, I got the message "REALLY BIG WARNING!!! Seems like a client connected to your target AP leaks PLAINTEXT data while authenticating!!"
I viewed the tool ...
1
vote
0answers
159 views
Is there any more attacking points for this server? [closed]
Here is my situation:
I already compromised the webserver. I want to attack the database server which has a IP of 192.168.100.2 which is a network that cannot be reach from outside. Through pivoting, ...
1
vote
1answer
138 views
Need help with searching a file in mutillidae webserver
My school has setup a webserver with mutillidae installed for us to train our hacking skills. Our goal is to find a text file. After some hacking done, I'm currently able to use remote desktop ...
8
votes
3answers
228 views
Building list of vulnerabilities that should be verified during pentest
I am currently studying how to do server pentesting and need some advice/protip related to methology/best practices.
People often mention that it is a good idea to gather intelligence and enumerate ...
10
votes
3answers
585 views
Tools to help test the security of Android applications
What are some decent frameworks to test the security of Android applications?
With frameworks I mean either software based to automatically scan these applications or a guide (like OWASP has for ...
5
votes
3answers
411 views
Why is tunneling so important in pen testing?
I am curious why tunneling is so important in pen testing.
If one has control of one machine in a network, then using that machine, one can run nmap and web apps and try to find out vulnerabilities..
...
2
votes
1answer
63 views
What is this hardened computer called? [closed]
After undergoing a security audit, it was suggested that a hardened computer be placed in the DMZ to run firewall software. What is this hardened computer called?
2
votes
2answers
233 views
Tools/methods helping to determine application/protocol serving specific port
I do blackbox testing of the server and figured out that there is a bunch of listening ports. I need to determine what services/protocols those ports are used for.
What I've tried so far is to use ...
5
votes
3answers
411 views
What does WEP access point show during aircrack-ng attack?
I bought an old, used WRT-54G () which strangely enough, was running DD-WRT v24-sp2. Weird what turns up at yard sales.
I want to try the "aircrack-ng" WEP cracking procedure on it. The criteria ...
6
votes
3answers
369 views
How useful or beneficial is participating in CTF contests for my security career?
Yes, there are already some great questions and answers about CTF contests on StackExhange Security. But before I go down the rabbit hole of comparing all the CTFs out there, trying to find a team to ...
1
vote
1answer
767 views
Are SQL injection scans considered illegal? [closed]
I know that this thread mentions that
Essentially, if you are seen to be someone who knows what you are
doing, then even typing in a single-quote to a web form has been
enough to be arrested ...
5
votes
3answers
982 views
Ethical Hacking - Penetration Testing Book(s)
I am an IT student who wishes to seek a career in the field of Ethical Hacking, more specific in Penetration Testing.
Due to the nature of my course, none of my classes go deep enough into this ...
4
votes
2answers
531 views
How to pentest Flash file on webapp with alowscriptaccess=samedomain?
In the course of a pentest I found a Flash movie file (swf) that loads another Flash movie through loadMovie. The HTML is this:
<embed width="388" height="350" ...
3
votes
1answer
181 views
tcp seq number prediction
While testing a system, nmap told me that the tcp seq number prediction is really low, (trivial joke). There is only one system in the whole range that gives me that answer. Some papers, e.g. a ...
1
vote
1answer
307 views
Web application penetration testing resources? [duplicate]
Possible Duplicate:
Best resources to learn web security attacks?
I'm very interested in web application penetration testing. I went over every good Youtube video on that subject and most ...
-4
votes
4answers
261 views
Should companies use Crowd Source Audit Platform for Manual Penetration Test?
As a CIO, CISO, CTO or Sys Admin, would you use a crowd sourced platform for penetration tests in order to improve your security issues?
LE: So most of you guys downgrade, and said it's wrong to have ...
1
vote
3answers
441 views
How to intercept an application that bypasses local proxy
I am behind a corporate proxy and the application that i have to test will work only if it is given an exception for using proxy server(i.e it is added to the exceptions list of the sites that do not ...
1
vote
0answers
20 views
What is Penetration Testing? [duplicate]
Possible Duplicate:
What is the difference between a penetration test and a vulnerability assessment?
What is Penetration Testing? When a security professional throws around these words, ...
1
vote
3answers
204 views
web application security testing definition [duplicate]
Possible Duplicate:
What is the difference between a penetration test and a vulnerability assessment?
When people talk about webapp security testing, do they usually mean vulnerability ...
0
votes
0answers
136 views
Does anyone have recommendations for PenTest companies? [closed]
As our company is growing in size we've decided its time for a PenTest. We'd like to do several pentests. One on our actual stie hosted off site on a dedicated provider. One of our internal office ...
0
votes
0answers
443 views
Good Android tablet for pentesting apps? [closed]
I'm looking into buying a new Android tablet for pentesting / security auditing apps. Currently I've been using Acer A500 Iconia, but it does not have support for mobile networking which for my ...
0
votes
1answer
101 views
How can I remotely detect versions? [closed]
I want to know how to remotely detect a software version.
Once attacker knows the version installed, he can exploit published vulnerabilities. So it will be useful to know it when doing penetration ...
4
votes
1answer
174 views
Securely Store Credentials for Web Application Services in Apache
We are running a web application in python using wsgi with apache2, and must submit to a penetration test. The testers will be exploring the potential for damage if the attackers gain shell access as ...
3
votes
5answers
3k views
Using Python for security
I love using Python for the scripts I need and for work. But I really want to learn Python for network security since I will start a NS course next year.
My question would be how would it be the best ...
2
votes
8answers
1k views
Pen Testing Practice Box?
Are there any windows based pen testing vms out there similar to Metasploitable based on ubuntu?
Just starting to learn hacking and such a box would be very helpful.
2
votes
5answers
197 views
Can we predict the technology used from the URL?
As a person who is learning pentesting, I want to know if it is possible to predict the underlying technology used for the developement of the site from the URL?
For example: This is the URL of the ...
1
vote
1answer
412 views
Example of attack trees in the web application security analysis
Here I am again asking for some informations about attack trees usage in web application analysis.
For my master thesis I decided to study the usage of this formalism in order to reppresent attacks ...
2
votes
3answers
183 views
How to test for presense of antivirus?
I want to test that when user uploads file, then it goes through up-to-date and properly configured antivirus. I think that to test for it I need some malware that is likely to be detected (it doesn't ...
1
vote
2answers
308 views
Published data sets for IDS/IPS evaluation
I am looking for data sets published by researchers or freelancers which can be used for the purpose of IDS/IPS testing and evaluations. The data sets may be for portscans, DoS attacks, Remote to ...
3
votes
1answer
292 views
How to determine which security testing method to use if resources are limited
My resources are limited, and thus i am wondering what methodology can I apply to know where black box testing is best fit, where white box testing is best fit? Or even where pen testing is better ...
1
vote
3answers
624 views
Is scanning a site directory considered illegal penetration testing?
Does anyone know if using Dirbuster [link] to scan for unlisted directories and their contents is (possibly) legal in say the US?
5
votes
1answer
571 views
How to Perform Vulnerability Assessment for WCF services
Does anyone know how to perform penetration testing/vulnerability assessment for Microsoft WCF services I couldn't find a tools till now , any tools available and guides are welcome
