1

In some extent, different kind of vulnerability assessment and penetration testing may impact on target system. I am looking for the solution/rollback process if something goes wrong during test.

For example, to check the stress absorbing capacity of any server DoS attack testing might me one solution. During DoS/DDoS attack target system may be interrupted in service or totally shut down. In this case, we need to pause the testing or decrease the amount of packets sent to the target system. Additionally we can restart our clients targeted server if any change happen which might impact the service of the target machines.

I am not sure I have make an example of rollback process/procedure for a part of vulnerability assessment. By the way, if anyone knows some other rollback process might be necessary during/after vulnerability assessment and penetration testing, please give me your valued opinion/suggestion regarding this issue.

Improve this question
4
  • It is kind of hard for me to understand what you are asking. If you are asking about rolling back in the sense of the state/data of the machine then this might be better asked on Server Fault. Otherwise you can't really undo a DDoS attack. The damaged of spent resources is permanent. I know for online video games rollbacks have been done since characters might of suffered from item/xp loss due to death. Otherwise, rolling back procedures are going to depend on your situation, tech stack, if there is a need to rollback, etc. So currently it is too broad/difficult to answer.
    – Bacon Brad
    May 24, 2016 at 8:19
  • @baconface, You understood exactly what i am asking. As part of Vulnerability assessment and penetration testing service penetration testers have to give Rollback process in case something goes wrong during test. And, Yes, i am gonna post it to Server Fault also. Thanks for the info! :)
    – Shakir
    May 24, 2016 at 8:36
  • It sounds like you are pen testing a live system. This is a very bad thing to do. The typical way to handle "rollback" is to pen test on a non-production environment and then just not care if you break things.
    – Neil Smithline
    May 25, 2016 at 1:47
  • Also, please do not cross post. Flag your question and ask a mod to migrate.
    – SilverlightFox
    May 26, 2016 at 8:48

0

Reset to default

Browse other questions tagged or ask your own question.