Tag Info

Hot answers tagged

3

It is always preventative. Detective controls detect an intrusion in progress. A penetration test is not an intrusion as it is an intended and approved use of the system, even if the use is simulating a breach. It is a preventative measure to keep actual attacks from occurring by finding holes that need to be fixed. The argument could possibly be made ...


2

Any bug tracking software is the standard for this tool. Vulnerabilities you find are simply 'bugs'. Assign severity, track the vendor's response and follow-up, and detail the issues all within the tool. Github, bugzilla, Jira, etc. Choose the tool that matches your needs and workflow.


1

To help review or design security controls, they can be classified by several criteria, for example according to the time that they act, relative to a security incident: -Before the event, preventive controls are intended to prevent an incident from occurring e.g. by locking out unauthorized intruders; -During the event, detective controls ...


1

First of all, are you sure you want to become that? It's not as cool as you think it is. Second, you can't find lack of security controls if you don't know what are you testing. What does this mean? First you need experience. As you want to become pentester you are going to have tons of experience, minimum you need to be proficient in networking, systems ...


1

Yes Linux AV such as Sophos check for and find EICAR. EICAR is a test file with a known signature used to establish the fact that your signature-based AV is working. Many certifiers require a positive result for that test.


1

EICAR is so simple it doesn't need any Windows COM files or anything ! Have you actually looked at the EICAR code ? Its all self contained in one tiny file. As for why would Linux antivirus need to look for a Windows virus? Lots of people use Linux machines as servers (mail,web,file etc.) ... all of which may serve Windows clients. Seems fairly ...


1

You can write penetration testing tools in Java or C#. Armitage is evidence of this. And you can search for vulnerabilities in Java code but not vulnerabilities like buffer overflows or format strings. I don't know the name of these vulnerability types but let's say that if a condition is wrong and with given input it grants you some privileges. Also Java ...


1

Because there's both civil and criminal risk associated with performing a penetration test, this feels like one of the areas where you should not go cheap, and should in fact obtain legal advice from a lawyer. If you attack systems that are not in scope, you might technically be violating the CFAA or other locally applicable laws, and if you (inadvertently) ...


1

SANS has a pretty nice white paper on the subject here. GIAC also has white paper geared towards managment of pen test which covers some of it here. I would keep in mind that you may need to have both general and specific legal agreements depending on the scope and offerings you provide. Your focus should be on the laws pertaining to doing an engagement, ...


1

I'm not sure there is an answer to this question. Each pentester has his/her way of doing things, and your statement which reduces the entire industry to a printer plugged to Nessus should probably be substantiated a little better.


1

In my conception, what you described can be called vulnerability assessment, which consists of finding out possible points of penetration in the system. It is greatly enhanced by automated tools due to the volume of tests it can process in no time. It should be noticed, though, that vulnerability assessments are not perfect and, usually, require manual ...



Only top voted, non community-wiki answers of a minimum length are eligible