Tagged Questions

The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
199 views

Using Nikto to better secure servers, and understanding output

Im getting these output for the server I am testing against. - Nikto v2.1.4 --------------------------------------------------------------------------- + Target IP: + Target Hostname: ...
31
votes
3answers
2k views

What kind of network attack turns a switch into a hub?

I read an article today describing how a penetration tester was able to demonstrate creating a fake bank account with a $14 million balance. However, one paragraph describing the attack stood out: ...
0
votes
1answer
122 views

DB Detection: MySQL >=5 (Auto Detected) Method: GET Type: Integer (Auto Detected)

Could someone please tell me which penetration-testing tool leaves behind a page that looks like this? DB Detection: MySQL >=5 (Auto Detected) Method: GET Type: Integer (Auto Detected) ...
6
votes
4answers
409 views

Penetration Testing - Trust and Hiring

When you hire someone/business to come in how can you be sure they won't have a rogue employee who will backdoor your systems? Is there a way you can trust anyone? How do big corporations do it? Seems ...
1
vote
2answers
321 views

Malware scanners for apache log files

Are the any malware/security scanners out there, that can analyze apache error and access logs and tell me if I have potential risks on my server or if there is unauthorized access etc. ?
6
votes
9answers
1k views

Is it worth hiring a hacker to perform some penetration testing on my servers? [closed]

I'm working in a small IT company with paranoid clients, so security has always been an important consideration to us. In the past, we've already mandated penetration testing from two independent ...
3
votes
1answer
442 views

Looking for a good web penetration testing client

I'm implementing mod_security on an apache server. In order to test the effectiveness of the protection, I am looking for a client that can generate a set of predefined malicious HTTP requests. I will ...
1
vote
1answer
162 views

Is there a program that automaticly finds .PHP files on a web server and tests them for SQL injections?

I learned about the recent Barracuda hack, which sources say used an automated tool to locate some PHP file and test it for SQL injections. At my current company, I feel that security is not the top ...
3
votes
2answers
797 views

Is it worth running nessus as well as OpenVAS?

Apparently OpenVAS originated as a fork of Nessus. It is very easy to install and use OpenVAS because it's, well, open. However, am I kidding myself if I just use that instead of Nessus? Should I ...
2
votes
3answers
2k views

How can I read the files stored on the hard drive of a Xerox 7242 printer?

So, I've read that most printers save the files they print/scan and I was trying to see if that's the case with our work printers. Is there a tool to let me access these files?
5
votes
4answers
1k views

Penetration testing - common examples?

I was charged to do some basic penetration testing on our system. I tried to find some favoured practices but I was not successful. I guess SYN attack is retired (no NT here). Could anyone advice some ...
1
vote
2answers
763 views

Best pen test distro

I have seen a lot about Back Track and was wondering if that was the best pen testing distro or if there are others that are better.
0
votes
1answer
434 views

Where can I download airchat?

I'm a penetration tester currently conducting a security test on our company's network, and have already verified most of the hosts on the network are secure. But I saw this video I heard of this type ...
11
votes
11answers
2k views

Penetration Testing

We're deploying a new website, hosted ourselves. Short of getting in white hats how would you go about penetration testing from outside the network?