An attempt to penetrate a system's security in an effort to evaluate the protections in place.

learn more… | top users | synonyms (2)

1
vote
1answer
64 views

Wireless Testing - monitor mode issues

I am currently learning about Wireless testing and have stumbled across a couple of little issues. The system setup I am working on is as outlined below: Kali Linux - 64-Bit (GNOME v3.4.2) Virtual ...
0
votes
0answers
10 views

error create_lsc_credential_omp:4506

Google isn't providing me with any helpful answers. I'm running Kali Linux 64bit, with OpenVas running. I am able to run scans fine, and read results in Greenbone. However when I try to create a LSC ...
-5
votes
0answers
33 views

What are some good Books on Web Application Security Testing? [on hold]

I am a black-box tester. I primarily test functionality of Web applications/sites. I want to move into the Security testing domain. Please suggest some practical and useful Books/Tutorials and free ...
4
votes
3answers
422 views

Is it necessary to test all input parameters of a web application when testing its security?

We know that testing input parameters for lack of validation is one part of a black box web vulnerability assessment but, is it necessary to test ALL input parameters (parameters, cookies, HTTP ...
7
votes
7answers
3k views

eCPPT vs. OSCP Certification

I am a soon to be college student. I am looking to become certified in pentesting for both personal interest as well as to be able to have something that would look good to future employers. Both ...
-5
votes
0answers
34 views

How to scan a target behind a firewall using Firewalk? [on hold]

I have used firewalk nmap script and the output of this script is: Host ip XX.XX.XX.XX Blocked ports 1,3-4,6-7,9,13,17,19-20 Traceroute: my router ip not important ip ip ... the host which in ...
0
votes
0answers
51 views

Is there any Windows/Linux host officially available on the Internet for practicing penetration testing? [duplicate]

Is there any Windows/Linux host officially available on the Internet for practicing penetration testing? I am having continuous trouble with Virtual-Box. It is horribly slow to load and giving me ...
-2
votes
1answer
49 views

Crypto for penetration test [on hold]

I'm a newbie but I want to become a penetration tester. I'm taking a course on cryptography but I'm wondering... how useful is crypto for penetration testing compared to other skills like operating ...
1
vote
1answer
65 views

Is there a backdoor in the hardware of our smartphones?

I don't know for you but I always felt like Android especially is not safe. Is somebody - the government or other - able to listen to my microphone, or access my hard drive remotely ? I'm wondering ...
0
votes
1answer
104 views

How to communicate a positive feeling about ethical hacking to non technical people? [closed]

Summary: For most non technical people, who hear about computer security either in the news because of some giant breach or in the movies, there are two kind of hackers: The professional people ...
1
vote
1answer
78 views

Concerns discussing 'illegal' activities in a job interview [closed]

Before I begin, I say 'illegal' because I guess the law is somewhat sketchy around the topic and that topic is XSS research. Apparently people have been taken to court over it and UK law does have a ...
0
votes
0answers
29 views

how to test clones site [closed]

I want to find a vulnerability in a site which end in .aspx and this is what I have so far: The system server is IIS 7. System OS is Windows Server 2008. I have found a URL in site maybe its so ...
-1
votes
1answer
33 views

Does MITM attack work across Remote Systems?

I have question about if MITM works across remote systems? Often, I'm doing internal penetration test, but I'm not sure about how to do MITM attack when I am outside from that network. Does classic ...
19
votes
7answers
13k views

Comparing online security courses: eLearnSecurity vs. Offensive-Security [closed]

I'm a web programmer, using the Linux environment for 2 years.(I have experience with Web app hacks +Web app security techniques) I want to start studying security in-depth, but I have limited time ...
0
votes
1answer
62 views

What is safebrowsing.google.com ?Does it impact the security testing?

I recently security tested my web application using Firefox browser and while pentesting my webapplication i noticed safebrowsing.google.com,while i diged more about it ,i could able to retreive only ...
1
vote
1answer
33 views

how to get cookies from aspx site to use it with hydra

I've been playing around with Hydra and .aspx site and I've hit a bit of a snag - Hydra responds letting me know that the first 16 passwords in my password list are correct when none of them are. ...
1
vote
1answer
366 views

WPA cracking with Crunch, JTR & Aircrack

Now I assume that everyone knows of aircrack-ng and John The Ripper with it's fantastic ability to pause and resume cracking. With that aside, I want to add Crunch into the mix, however I can't seem ...
47
votes
6answers
7k views

Do actual penetration testers actually use tools like metasploit?

I've played around with metasploit simply as a hobby but am wondering if actual pentesters and/or hackers actually use metasploit to get into systems or do they write their own post exploitation ...
4
votes
1answer
130 views

Should veil framework produce packed and obfuscated binaries which bypass virustotal?

I have been working with the veil framework to test an internal IDS system I have in place. I have used a public malware sample which produces an 8/53 hit score on Virustotal and run it through the ...
4
votes
1answer
226 views

How do I continue pentesting with access to local station?

I started learning hobbyist penetration testing a while ago, and as far as penetrating a computer I have physical access to, all is good. Mainly using Hiren bootCD, it is easy to gain access to an ...
0
votes
1answer
47 views

Can I use Metasploit to demo penetration testong on Zigbee or Smart meter? [closed]

Does Metasploit have functionality to demo penetration testing on Smart Meter or Zigbee?
2
votes
1answer
31 views

Different TTL for a single server

One of our client perform a qualys pentest, and find LB based on TTL value. We have only 1 server behind FW with NAT IP. Running ubuntu that has default TTL '64' qualys output Number of web ...
0
votes
1answer
2k views

Hydra gives wrong answers

Problem: Hydra keeps giving me incorrect passwords every time. I'm using brute-force via Hydra to guess the correct password on a certain website. First of all I used BurpSuite to intercept the page ...
3
votes
3answers
1k views

Verifying NLA support on Remote Desktop

What is the best way to verify if an MSRDP server has NLA enabled or not? My understand is that if enabled, it will not show a graphical screen when trying to connect, but ask for credentials first. ...
0
votes
0answers
25 views

Vulnarability test for CVE-2014-2483?

I am in penetration testing on a server with Linux RHEL6/7 os. Vulnarability databases such as http://www.cvedetails.com/ mentioned the vulnarability CVE-2014-2483 for java in linux RHEL systems. I ...
3
votes
1answer
609 views

Security analysis of Dashlane

I've been asked by a user whether I would recommend using the Dashlane password manager. I'm aware that other password managers have had some significant security problems, including XSS and CSRF ...
1
vote
3answers
2k views

Login required before SQLmap

I have a multipart form data where I am suspecting one of the multipart form fields (parameter named htmlbevt_id), to be vulnerable to SQLi. To test for the same I captured the request using Burp and ...
27
votes
5answers
3k views

Open-source penetration-test automation

What order do typical open-source penetration tests operate? Which tools are run first, second, third -- and how do you control them? Does one simply use Metasploit RC files? A network vulnerability ...
-1
votes
0answers
29 views

How to forward external port to Kali Linux? [migrated]

I have an issue about networking. My previous question was about how does metasploit payload work? And I got right answer( I have to redirect port to internal ip which corresponds to Kali Linux's ip). ...
6
votes
4answers
1k views

What are good resources to do hands-on practice on network penetration testing?

Can anyone provide a good list of resources to learn network penetration testing? I am specifically looking for those having hands on exercises (kind of virtual labs/ISOs) which are free. I know ...
0
votes
1answer
85 views

Virtual Penetration Test Lab - Figuring Out Its Market Size

Is there any reliable data available based on which the Global Market Size of Virtual Pen Testing Labs ( or Cyber Ranges ) can be ascertained ? If NOT , is it possible to calculate it ?
2
votes
1answer
383 views

Penetration testing real-life practice

I see a lot of similar question but my is different. I had done a lot of challenges like Kioptrix and De-ice. But I'm not sure that this is real life pen testing. I mean this is so simple only nmap ...
38
votes
5answers
21k views

Servers for penetration testing

I am learning to use Metasploit as part of one of my college lessons. As you may know there are software builds like NOWASP (Mutillidae) or Damn Vulnerable Linux that allow you to exercise on pentest ...
2
votes
0answers
36 views

Airodump-ng & Aireplay-ng: No packets from AP [migrated]

I'm pretty new to penetration testing and I'm trying to learn how to correctly use airodump-ng with aireplay-ng to break through wep encryption on my AP. I have managed to get the password with ...
0
votes
1answer
65 views

Burp Suite is not intercepting JSON responses [closed]

I am trying this video and this video to learn pen-testing using JSON injection. Burp Suite is able to intercept the request from the page, but not getting the JSON response. How to solve that?
1
vote
2answers
101 views

What NIC for a NUC? [closed]

I have been doing external pentests using the Intel NUC (D34010WYK1). It has been a very stable machine running Kali Linux. I am at point now that I would like to do some wireless testing. Has ...
0
votes
1answer
178 views

Windows netsh pivoting

I am pentesting a windows box to which I have gained system privileges. This box has two network interfaces. I have been able to reach machines on the second interface via the below netsh command. ...
7
votes
0answers
88 views

A way to trigger an SELinux policy violation? [migrated]

I'm studying the basic workings of SELinux and would find it useful to trigger a denial. My test machine is running CentOS 7, it's a basic server install without any extra services, and getenforce ...
1
vote
1answer
33 views

PTES: Diferences between Internet Footprint, OSINT and footprinting

I'm trying to understand what are the differences between an Internet Footprint, OSINT and footprinting. I'm reading the pentest-standard and it seems the same.
9
votes
3answers
7k views

Best way to test my home network from the outside

I want to check that my router is working like it should. For example that certain ports which should be open on the LAN side and closed on the WAN side really work that way. So I would like to run a ...
-1
votes
1answer
88 views

How to test if my server is secure? [closed]

I'm using a debian7 VPS for hosting my websites. I have only installed webmin, apache, mysql, SSH and a wordpress website. I always update my packages and wordpress version. What is the best (free) ...
2
votes
0answers
122 views

XSSER get and post

I am using xsser for XSS vulnerability testing and I have a doubt about the parameters when it's a POST method. I have tried against DVWA (which uses get) with success like this: xsser -u ...
5
votes
1answer
223 views

Feedback for Study Plan (Kali Linux & Penetration Testing) [closed]

I started to study pentesting for two months with the book named Penetration Testing - A Hands on Introduction to Hacking by Georgia Weidmann, and now I am really hungry to learn more :) . I think I ...
0
votes
1answer
156 views

Question about padbuster … newbie

New to this type of attack trying to understand this .net oracle padding attack, i'm using this data : padbuster ...
1
vote
0answers
65 views

What is the problem with my pen-testing lab? [migrated]

I have setup Kali Linux and Windows XP in Virtual Box. My first problem is, these two systems are not being able to ping each other. Second is, they are not being able to connect to the Internet ...
104
votes
8answers
5k views

Is it acceptable that a skilled professional pentester deletes or modifies sensitive data in production unintentionally during a pentest?

Today I experienced a situation where a person responsible for the security of a company required a pentesting company to withdraw a clause in the contract that says that: "during the pentest there ...
19
votes
3answers
4k views

Google hacking - why “numrange” is so dangerous?

I'm reading Google Hacking for Penetration Testers and in book it's said several times operator "numrange" is especially powerful and dangerous. However, they don't give example of using this ...
3
votes
2answers
1k views

Web Crawler for ASP.NET site

Do you know any crawler/spider software, which is able to go through ASP.NET application, not ASP.NET MVC, but the one full of __doPostBack JavaScript functions on every link/button/change event? If ...
1
vote
0answers
146 views

SSL traffic manipulation through ettercap MitM and iptables

I am trying to understand the relation between some tools and concepts used for MitM on a wifi network and how https transaction (over this wifi network) between an android app and the respective ...