Tag Info

New answers tagged

0

Try http://www.codebashing.com/sql_demo .. they have created an interactive security war-game with integrated tutorials that walk you through a security vulnerability .. currently they support OWASP top 10 threats and are also working on a mobile security training portal. Disclosure: I work for Codebashing as a developer


1

To help review or design security controls, they can be classified by several criteria, for example according to the time that they act, relative to a security incident: -Before the event, preventive controls are intended to prevent an incident from occurring e.g. by locking out unauthorized intruders; -During the event, detective controls ...


3

It is always preventative. Detective controls detect an intrusion in progress. A penetration test is not an intrusion as it is an intended and approved use of the system, even if the use is simulating a breach. It is a preventative measure to keep actual attacks from occurring by finding holes that need to be fixed. The argument could possibly be made ...


0

I think your approach will depend on what requirements your colleague has for the system's security. The token itself performs a very simple job as part of the authentication architecture. What you'll really be testing is the behavior of the software on the server which, presumably, is provided to you by a vendor. To that end, here are a few tests that must ...


0

I'd recommend http://vulnhub.com/ as a place to start looking, as they have been building a repository for pentesting VMs for a while now.


0

There are stacks: Metasploitable, DVWA, BWaPP, Mutillidae, WebGOAT (although the last few are vulnerable web apps). There is also Hack.Me, a community project where people upload vulnerable sandboxes for others to practice against. Troy Hunt has an online vulnerable web app to test against: http://hackyourselffirst.troyhunt.com Alternatively, you could ...


0

Google "MITM PROXY", you will find a lot of tools. One example is: http://mitmproxy.org/ With cell phones, MiTM attacks are multi-route, so you have to sometimes do some pretty technical set up of environments to completely cover all the paths. Remember you have 3g/4g, sms/mms, wireless, NFC, BT/BTLE. Of course if you are using just the emulator, then you ...


0

security+ from CompTIA is awesome. I'm halfway through the fourth edition and it's an eye opener. What the dude above me is trying to tell you, is Go fix an time piece with all the springs and gears with a shoe makers experience. Computer protocol studies are boring, drawn out, and hard to comprehend without intense or long term studies. What I suggest you ...


1

First of all, are you sure you want to become that? It's not as cool as you think it is. Second, you can't find lack of security controls if you don't know what are you testing. What does this mean? First you need experience. As you want to become pentester you are going to have tons of experience, minimum you need to be proficient in networking, systems ...


1

Yes Linux AV such as Sophos check for and find EICAR. EICAR is a test file with a known signature used to establish the fact that your signature-based AV is working. Many certifiers require a positive result for that test.


1

EICAR is so simple it doesn't need any Windows COM files or anything ! Have you actually looked at the EICAR code ? Its all self contained in one tiny file. As for why would Linux antivirus need to look for a Windows virus? Lots of people use Linux machines as servers (mail,web,file etc.) ... all of which may serve Windows clients. Seems fairly ...


0

Temporarily, I've decided to abandon all Ubuntu-based distributions in favor of RedHat-based ones. I am finding that SecurityOnion and Kali are more and more difficult to work with. As a final nail in their coffins, I am finding that most companies run RedHat, or have some official support for RHEL/Fedora/CentOS (notably yum and RPM packages). When I ...


1

You can write penetration testing tools in Java or C#. Armitage is evidence of this. And you can search for vulnerabilities in Java code but not vulnerabilities like buffer overflows or format strings. I don't know the name of these vulnerability types but let's say that if a condition is wrong and with given input it grants you some privileges. Also Java ...


0

Remove all unnecessary information from the URL (e.g. http://, the name of the site, etc.). If you have several options (e.g. five sites), use their index. Calculate a hash of what remains using a server-side secret salt and prepend it (or a part of it - the shorter it is, the greater the danger of a successful collision attack) to returnUrl Upon receiving ...


1

Because there's both civil and criminal risk associated with performing a penetration test, this feels like one of the areas where you should not go cheap, and should in fact obtain legal advice from a lawyer. If you attack systems that are not in scope, you might technically be violating the CFAA or other locally applicable laws, and if you (inadvertently) ...


1

SANS has a pretty nice white paper on the subject here. GIAC also has white paper geared towards managment of pen test which covers some of it here. I would keep in mind that you may need to have both general and specific legal agreements depending on the scope and offerings you provide. Your focus should be on the laws pertaining to doing an engagement, ...



Top 50 recent answers are included