New answers tagged web-scanners
1
Your searches must have missed the GitHub repo, which is highlighted on w3af.org.
Examples are all there.
6
It is the ONLY way to be sure.
11
Unless you have an expert in computer forensics it's gonna be very difficult to know what happened, what files were modified, and what kinds of backdoors were installed.
Since your web server is "huge" I assume you're following a good backup policy, right? Right? Once you have a breach, assume the server is compromised and restore to the most recent good ...
1
Why would you be testing CPanel for PCI compliance? How did you come to arrive at C-VT as the applicable SAQ?
Which PCI requirement is this being done to meet?
One thing is for sure: CPanel should NEVER be exposed to the open Internet. So if you are scanning it from over the net you can forget PCI compliance.
I do PCI for a living.
3
In terms of scanning the system for compliance, it's a question of running vulnerability scans and see if they pass externally and if the risk is acceptable internally. In terms of whether the system is configured in a compliant manner takes more work as per the following list:
Is networking limited to protocols required for business purposes with no ...
1
I'm not sure what a self-test is, however you don't need to pay anything for tools in order to test against the PCI standards. There are loads of free tools out there, there are even security and forensics specific OS distros out there that cost absolutely nothing. So get a copy of the Backtrack or Kali OS distro and run it off a USB or as a virtual machine ...
Top 50 recent answers are included
