14 votes
Accepted

Security scan result - Server leaks inodes via ETags

First of all, this is a false positive. Nikto reports this issue "Server leaks inodes via ETags" if there is a dash in the ETag header, which is by itself not an indication of anything. An inode is a ...
Sjoerd's user avatar
  • 30.4k
12 votes
Accepted

How to perform a proper DDoS test in a safe and controlled way?

If you are performing load testing at high packet rates, the most safe way is to isolate it completely from the rest of the network. For example, you can connect two servers by direct 10GBps link ...
Aria's user avatar
  • 2,731
8 votes

Did DARPA's Cyber Grand Challenge winner actually discover previously unknown vulnerabilities?

The DARPA test bed, CGC (Cyber Grand Challenge), was a modified Linux platfrom (DECREE). Its binaries (the compiled machined code for the system) contained only 7 system calls (e.g., terminate, ...
Dalton Bentley's user avatar
5 votes

How to perform a proper DDoS test in a safe and controlled way?

The single best plan is not to do this. It rarely serves any purpose, as DDoS will work against you. That's a given. It is so easy to create a high volume attack now it's not even worth trying to do ...
Rory Alsop's user avatar
  • 61.5k
4 votes
Accepted

How to test for NoSQL injections?

A very-basic NoSQL injection can be studied here -- https://ckarande.gitbooks.io/owasp-nodegoat-tutorial/content/tutorial/a1_-_sql_and_nosql_injection.html -- which is available from your testing ...
atdre's user avatar
  • 19.1k
4 votes

QR Code Security Testing

How can I test QR Codes on security issues? The QR code is just a piece of data. It's no different from a bar code - or a text string. It encodes data. Your question is essentially meaningless, as ...
vidarlo's user avatar
  • 16k
3 votes

What is dynamic code analysis? Is it the same as DAST?

SAST is more than just scanning code. I'd consider scanning dependency lists/files or inspecting containers and hosts to be a form of static analysis. Anything that doesn't require executing and ...
Thomas Owens's user avatar
  • 1,062
3 votes

Use of automated security testing tools in the industry

There are many tools, and a few standards, but no standardized tools and a lot of the tools are expensive. To minimize risk you basically have to teach your team how to code and deploy securely, ...
Trey Blalock's user avatar
  • 14.2k
3 votes
Accepted

What phases does a network penetration test consist of?

When I engage in penetration testing, my goals go above beyond finding open ports, to finding "information" that could be used to gain access, or negatively impact the company. If you solely focus on ...
munkeyoto's user avatar
  • 8,702
2 votes

How to test the security of a hardened Web Browser?

If you want to test the sandbox capabilities you need something like a real exploit which will try to do something an attacker would do. But I think it is not really possible for you to get a exploit ...
40F4's user avatar
  • 932
2 votes

How to perform a proper DDoS test in a safe and controlled way?

Fundamentally, the way a Distributed Denial of Service works is by flooding a companies bandwidth with to much traffic. The actual attacks may differ in source and style, but they share the same goal. ...
TheGiantPossum's user avatar
2 votes

Continuous SQL injection testing

You could script up example based testing pretty easily. With a sample request, sqlmap can do the rest. The only thing it doesnt do by default I believe is path paramters, but that as well could be ...
joe's user avatar
  • 592
2 votes
Accepted

How to check/test security issues of freeware?

Almost the same thing as what can be done for paid softwares: examine the reputation of the vendor/software, and evaluate the risk in adding it to white list against the cost of forbidding it. For ...
Serge Ballesta's user avatar
1 vote
Accepted

Not able to see server response when making request using python

Based on the information you've provided, it seems that the issue is not with your code, but rather with the way Burp is configured. It appears that Burp is not intercepting the response from the ...
Hooman.AS's user avatar
1 vote

What is dynamic code analysis? Is it the same as DAST?

Yes. Dynamic Code Analysis is same with DAST. Check the following checkpoint web page: What is Dynamic Code Analysis? Dynamic code analysis – also called Dynamic Application Security Testing (DAST) – ...
Hasan's user avatar
  • 529
1 vote

Auto-login to refresh token in Burp Suite 2

I also faced the same issue with Angular (OAuth) multi page login has the login issues with one of the web app I was testing so I came up with a burp multi extension solution. If you are interested, ...
Vinay's user avatar
  • 11
1 vote

Using Selenium to automate data entry

I would not use Selenium as there is an entire class of scripts called Grease Monkey scripts that automate repetitive user task. See TamperMonkey for one of many examples.
sevensevens's user avatar
1 vote

Criteria for selecting fields and network protocols for fuzzing

I think you're going to often find that your criteria is constrained by several factors, which actually limit what you can test. The tools you have access to, and the licences you're operating under (...
Daisetsu's user avatar
  • 5,120
1 vote
Accepted

Continuous SQL injection testing

I would like to look at this problem from a different point of view. You've said that you found many SQLIs in different API endpoints in your application. What exactly was the fix/mitigation for ...
shawkyz1's user avatar
  • 126
1 vote

Continuous SQL injection testing

Interesting question! You will need to automate multiple processes for this to work. There is no magic product (which I know of) that does this, but here is an algorithm: Gather info about web ...
AK_'s user avatar
  • 687
1 vote

Can I perform a local test for DNS leaking?

DNSleak inspects DNS packets on the local network interface to detect leaks. Unlike web-based solutions, it works at the local computer level. No third party servers are used and DNS leak result is a ...
lofidevops's user avatar
  • 3,620
1 vote

Automated Malware Analysis Tools as a standalone

Perhaps you can try Limon sandbox. (for Linux malware) https://github.com/monnappa22/Limon
Jeremy's user avatar
  • 113
1 vote

What phases does a network penetration test consist of?

In addition to the book references left in my comment, I think you can set the following as your high-level steps. OSINT (includes recon on the company, DNS records recon, etc) IP Scans Banner ...
DKNUCKLES's user avatar
  • 9,237
1 vote

How to perform a proper DDoS test in a safe and controlled way?

Beside asking the how you should consider asking the why. Case 1: you want to check how your service will be impacted by a DDoS -- this is possibly a reasonable thing to do. I would say that these ...
WoJ's user avatar
  • 9,018
1 vote

Use of automated security testing tools in the industry

Owasp is one of the most respected authorities on information security. Here is their list of testing tools. https://www.owasp.org/index.php/Appendix_A:_Testing_Tools In regard to minimising the ...
Chris - Mayhem Software's user avatar
1 vote

CentOS for security testing?

If you are working in a corporate environment, it is best to stick to the tools and OS that are supported by the IT department. Since their main concern seems to be stability with even Ubuntu being "...
SeeYouInDisneyland's user avatar
1 vote

Is there a tool to rate browser TLS/SSL configuration?

BTW, there are also plenty of software libraries which would need scrutiny if someone is into that sorta thing. There's a pretty neat tool called TryTLS (shameless self promo) that is used to check ...
Mamietti's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible