Tag Info

New answers tagged

0

As you are running a VPS you should be able to gain sufficient access, usually via SSH, to configure and install helpful software to automate some of the tasks required. You should look at tools such as LSAT and Lynis that support the process of doing a security audit: https://packages.debian.org/wheezy/utils/lsat https://cisofy.com/lynis/ You should ...


1

An XSS attack is performed by injecting malicious code to be displayed to another user. To use a standard login form for an XSS attack, you would need the malicious code to be in the username - the only thing likely to be shown to other users. But how the username-with-malicious payload got in there isn't relevant, so it is not inherent to the fact that ...


1

It looks good to me but I can recommend you also to learn at least one or two programming languages (Definetely Python, JavaScript and maybe C/C++ at least you sholud know basic knowledge). You can also download vulnerable application like DVWS http://www.dvwa.co.uk and test in your local environment. You can also download metasploitable linux vulnerable ...


-3

Penetration testing should follow a methodology where tests that can cause damage are done only in non-production scenarios, such as a staging or lab environment. The real issue is not deletion or modification of data because testers can leave those test cases to non-production systems. The real issue is leaving behind new data, such as error logs or ...


1

it's pretty hard to compare those two exams, IMO. Crest CRT is taken on-site with very limited Internet access and OSCP is done remotely, so they favour different types of people. In terms of level of technical content, I'd expect the OSCP to have more challenges to overcome as it's a longer exam (24 hours IIRC) against the practical element of the CRT ...


1

There are advantages to using Immunity Security or CoreSec products over Rapid7 (whether the commercial Metasploit offerings or the FOSS MetaSploit Framework aka MSF). You'll have to test them out for yourself, but it mostly has to do with being able to run canned exploits and organize plans/results. As far as I understand it, all MSF exploits can be run ...


0

If I remember right, you are fairly limited in the choice of wireless NICs for a NUC to begin with. I have a NUC, but never installed a wireless NIC. I would go with the one Intel recommends (which is, not surprisingly, an Intel NIC). Of course, you can also always use a USB NIC.


0

I dont have a NUC but if you want to do wireless testing you'll want a card capable of packet injection and promiscuous mode. I use the Alfa AWUS036H card (you may want to get a newer model) with kali linux and have no problems. From there you'll want to use the aircrack-ng suite of tools at minimum.


2

Several good ideas here. Just want to add a couple more and I don't have 'comment' rights yet: 1.) We in IT look at things from a tech standpoint. The people you need to convince likely look at it from a business standpoint. You need to be able to put it in clear $$$$ numbers for them. This is actually relatively easy. Risk = Cost of Breach * ...


0

On Software Testing: If you sign up for Fortify-On Demand at http://hpfod.com, you will notice that there are a variety of offerings, the primary three being dynamic security analysis, static security analysis, and mobile analysis. A few others such as IBM and Cigital mirror this model. All three of these vendors supply Software-Testing-as-a Service ...


0

A short and sweet answer would be: Software Testing revolves around code review and compliance with secure coding practices. A Penetration Tester utilizes various methods to emulate an attack and fully exploit a target system/network. They're related because a Penetration Tester may gain access to your system through exploitable software(I.e. buffer ...


0

I'll explain in rather simple words by explaining what actually they do. Lets start with penetration testing, as I work as one !! Penetration Testers usually are assigned a project (in your case a web application) to test , They go through the website ,Do some reconnaissance and try to find important functions of the web application e.g. For a Ecommerce ...


20

Take a passive approach and do a risk assessment. Security management is a form of risk management. You have assets which might have threats and vulnerabilities. A threat exploiting a vulnerability is a risk, which is calculated by calculating (quantitative) or estimating (qualitative) the likelihood and impact (most of the time it's high,medium,low but some ...


8

There are different ways to deal with this, ranging from questionably ethical but highly effective, down to completely passive. If you really want to show them that physical attacks work, break in during your next pentest. I don't mean "grab a crowbar", but rather walk into the lobby, walk past reception, and walk straight into their offices. If they ...


2

I'd recommend Virtutech's SIMICS software. Note that Virtutech was bought by Intel and assigned to their subsidiary: Wind River. Simics is a SIMULATOR, which has important distinctions from an EMULATOR (like qemu). See http://stackoverflow.com/questions/1584617/simulator-or-emulator-what-is-the-difference for specifics on the differences. Simics simulates ...


2

I'll put a slight different spin on the second part of your question concerning discipline cross-over, since I have experience doing these in my career. A good Penetration Tester has a hacker mindset. They work to defeat what security protections have been put in-place, by whatever creative means available to them and their knowledge set. A good PenTester ...


0

I would say you should view relationships between these 3 types of activities like that: penetration testing is a subtype of security testing which is in turn is a subtype of software testing. Security testing deals with very specific types of defects: security defects; ones that could result in compromised system, ruined reputation and stained public ...



Top 50 recent answers are included