Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options user 31625

An attempt to penetrate a system's security in an effort to evaluate the protections in place.

49
votes
Some other options: Passive voice: A vulnerability in HP Power Manager was discovered... Present tense: HP Power Manager is vulnerable to... It is most common (in the UK at least) to use the passiv …
answered Jan 27 '16 by paj28
3
votes
This is an empty SQL comment, and is treated the same as a space. This trick can be used to get around filters that strip out spaces. It may also be introduced to bypass a WAF or IDS.
answered Feb 5 '16 by paj28
11
votes
There's a big distinction between pen testers who write a bit of code, and developers of security tools. During a pen test, you may need to write some custom code. For example, if you find server-sid …
answered Nov 7 '16 by paj28
8
votes
To turn a quick profit, It is easier to go after end users. This is why there are so many phishing attacks and password stealing Trojans. Banks internet-facing operations tend to be well secured. The …
answered Nov 7 '13 by paj28
2
votes
1answer
Professional penetration testers are usually good at finding all sorts of vulnerabilities, including logic flaws, that are highly-specific to the site being tested. However, being a manual activity, p …
asked Oct 29 '13 by paj28
5
votes
No. The traffic is tunnelled through ToR, so it is just as untraceable as any other use of ToR. In practice you are not traceable at all, unless you make some silly mistake like including your real na …
answered May 15 '14 by paj28
0
votes
Sniffing can be very fruitful. Some other ideas: Nmap sweep scan. Often a simple ICMP ping works on an internal network. Otherwise, use common ports like 139 and 22. Identify patterns in host names …
answered Sep 9 '16 by paj28