Tag Info

Hot answers tagged

20

Take a passive approach and do a risk assessment. Security management is a form of risk management. You have assets which might have threats and vulnerabilities. A threat exploiting a vulnerability is a risk, which is calculated by calculating (quantitative) or estimating (qualitative) the likelihood and impact (most of the time it's high,medium,low but some ...


8

There are different ways to deal with this, ranging from questionably ethical but highly effective, down to completely passive. If you really want to show them that physical attacks work, break in during your next pentest. I don't mean "grab a crowbar", but rather walk into the lobby, walk past reception, and walk straight into their offices. If they ...


2

Several good ideas here. Just want to add a couple more and I don't have 'comment' rights yet: 1.) We in IT look at things from a tech standpoint. The people you need to convince likely look at it from a business standpoint. You need to be able to put it in clear $$$$ numbers for them. This is actually relatively easy. Risk = Cost of Breach * ...


2

I'd recommend Virtutech's SIMICS software. Note that Virtutech was bought by Intel and assigned to their subsidiary: Wind River. Simics is a SIMULATOR, which has important distinctions from an EMULATOR (like qemu). See http://stackoverflow.com/questions/1584617/simulator-or-emulator-what-is-the-difference for specifics on the differences. Simics simulates ...


2

I'll put a slight different spin on the second part of your question concerning discipline cross-over, since I have experience doing these in my career. A good Penetration Tester has a hacker mindset. They work to defeat what security protections have been put in-place, by whatever creative means available to them and their knowledge set. A good PenTester ...


1

An XSS attack is performed by injecting malicious code to be displayed to another user. To use a standard login form for an XSS attack, you would need the malicious code to be in the username - the only thing likely to be shown to other users. But how the username-with-malicious payload got in there isn't relevant, so it is not inherent to the fact that ...


1

It looks good to me but I can recommend you also to learn at least one or two programming languages (Definetely Python, JavaScript and maybe C/C++ at least you sholud know basic knowledge). You can also download vulnerable application like DVWS http://www.dvwa.co.uk and test in your local environment. You can also download metasploitable linux vulnerable ...


1

it's pretty hard to compare those two exams, IMO. Crest CRT is taken on-site with very limited Internet access and OSCP is done remotely, so they favour different types of people. In terms of level of technical content, I'd expect the OSCP to have more challenges to overcome as it's a longer exam (24 hours IIRC) against the practical element of the CRT ...


1

There are advantages to using Immunity Security or CoreSec products over Rapid7 (whether the commercial Metasploit offerings or the FOSS MetaSploit Framework aka MSF). You'll have to test them out for yourself, but it mostly has to do with being able to run canned exploits and organize plans/results. As far as I understand it, all MSF exploits can be run ...


1

You first want to set up a host OS (Windows or Kali, whichever you prefer to use when you're not hacking.) Inside that host OS, install a virtual machine platform (VMware, VirtualBox, whatever you choose.) Inside the virtual machine control panel, create a first VM and install Kali, (presuming you want to use Kali for your pentest environment.) I would ...



Only top voted, non community-wiki answers of a minimum length are eligible