Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options answers only user 140

An attempt to penetrate a system's security in an effort to evaluate the protections in place.

1
vote
In all of your examples, those URIs can (or, well, should) generally be reached by every penetration testing tool. Most tools such as web application security scanners (and often even web application …
answered Dec 5 '14 by atdre
1
vote
A pentester would never operate alone, there are too many errors and omissions. If you are looking for accreditation, look for it at the team, or member-company, level. In the UK (I am from the US, b …
answered Jan 20 '16 by atdre
1
vote
Sounds like a job for nmap (IP Protocol scan) or scapy. Older tools such as isic or ip6sic are in the same class, as are point-commercial solutions such as Codenomicon or Beyond Security and big playe …
answered Oct 12 '16 by atdre
2
votes
A general strategy and list of issues was spoken about in this thread -- https://security.stackexchange.com/a/68666/140 You should check out the MITRE CAPEC work. In 2015, colleagues and I have been …
answered Sep 17 '15 by atdre
1
vote
If I understand the PTES correctly, OSINT occurs in the process first, including the element Internet Footprint, and finally Footprinting. This document correlates tools to those processes -- http:// …
answered Apr 29 '15 by atdre
3
votes
The most-effective use of a security professional who has penetration-testing skills is to host cyber exercises. Some are referring to this as purple teaming or adversary simulation. Each approach wil …
answered Dec 3 '14 by atdre
3
votes
I am going to make some completely different arguments that go directly against PCI DSS and CIP CVA. My first argument is that it is stupid to ever hire external penetration-testers. Penetration-test …
answered Dec 1 '10 by atdre
0
votes
There are a few resources I'd like to point you towards in order to fully comprehend the tradtional and non-traditional approaches to penetration testing resourcing. Two books, one: "CISO's Guide to P …
answered Dec 3 '14 by atdre
4
votes
It's PowerShell Invoke-Expression The meaning of `download cradle' comes from Raphael Mudge's talk on Flying a Cylon Raider where he describes how to continuously stage external PowerShell scripts fr …
answered Jan 6 '16 by atdre
13
votes
The PTES -- http://www.pentest-standard.org -- has one aspect the other frameworks do not, actionability from tools -- http://www.nothink.org/metasploit/documentation/metasploit_msf_analysis_ptes.pdf …
answered Mar 28 '16 by atdre
2
votes
I use docker-machine and packer/vagrant with vmwarefusion as my provider. I can check the status of my machines with: docker ps vagrant global-status Vagrant is used for Windows and OS X images wh …
answered Sep 7 '15 by atdre
0
votes
A satisfactory result of a pen test is when the client and/or target audience of the reporting understands the messages and takes appropriate action based on decision science. Please reference How to …
answered Nov 11 '16 by atdre
1
vote
Applications cannot be certified as secure in the same way that vehicles cannot be certified as safe to drive. Your mechanic may hand you a list of things that he or she has checked and perhaps even v …
answered Nov 14 '10 by atdre
1
vote
Here is one method, and the bonus is that it is all done remotely -- https://www.dsinternals.com/en/retrieving-active-directory-passwords-remotely/ The author also shows how to dump the whole thing, …
answered Sep 23 '15 by atdre
1
vote
juno-z.101f.c bang.c dnos.c Pyloris That new, slow POST attack
answered Nov 14 '10 by atdre

15 30 50 per page