Linked Questions

1
vote
1answer
2k views

Penetration Testing vs Secure Source Code Review [duplicate]

Recently I came across to a situation where an institution has hired a third party vendor to develop its business applications. I came up with the following questions related to penetration testing ...
1
vote
3answers
379 views

web application security testing definition [duplicate]

Possible Duplicate: What is the difference between a penetration test and a vulnerability assessment? When people talk about webapp security testing, do they usually mean vulnerability scanning ...
0
votes
2answers
175 views

Is Pentesting now all about running Tools? [duplicate]

is Pentesting now just about running tools like Nessus and creating a report based on it ? and not actually exploiting anything on your own based on the Agreement ?
0
votes
1answer
195 views

What terms should I use to define security assessment work? [duplicate]

Possible Duplicate: What is the difference between a penetration test and a vulnerability assessment? I am tasked with hiring a consultant to do an analysis of our infrastructure security for a ...
1
vote
0answers
77 views

What is Penetration Testing? [duplicate]

Possible Duplicate: What is the difference between a penetration test and a vulnerability assessment? What is Penetration Testing? When a security professional throws around these words, what do ...
14
votes
3answers
5k views

Nessus vs third-party scans

As part of our PCI-DSS compliance process we get scans done by a third party. Based on the form and wording of the output, it's pretty clear they're using Nessus for most of their heavy lifting. Same ...
2
votes
2answers
4k views

Is exploit researching different from penetration testing

I'm confused by some terminology - reverse engineering seems to me to be pretty similar to exploit researching. I mean if you can reverse one program probably you will be able to find a vulnerability, ...
5
votes
3answers
895 views

Can Penetration Testing be considered as a part of a Vulnerability Management Program?

Can Penetration Testing be considered as a part of an exhaustive Vulnerability Management program? P.S: I realise the difference between penetration testing and vulnerability assessment. But I want to ...
5
votes
3answers
225 views

I want to have the security of my crypto code checked, how should I go about doing so?

Specifically part of my system stores encrypted information in a database. I wrote the code that actually does the encrypting/decrypting using an existing cipher. How should I go about making sure ...
4
votes
2answers
216 views

How to proceed with IoT Vulnerability assessment?

First: This is not one of those "How do I start hacking?" questions, but more of a "How do I begin testing a specific device?". It is a part of my Bachelor Thesis to perform a Vulnerability analysis/...
-1
votes
1answer
65 views

What is a fair fee to pay for a Penetration tester in the USA? [closed]

What is a fair fee to pay for a Penetration tester in USA to test a website running on PHP, linux, MySql and make recommendations for fixes? The site has thousands of pages and is running a YouTube ...