Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Exploit Repositories and Due Diligence |
|---|---|
| Date: | Thu, 9 Jun 2005 21:19:52 -0400 |
I have a question regarding the use of exploit repositories (including projects like Metaploit, and compliations on bootable distros like Whoppix). With all of the large exploit repositories used to make pen testing faster and easier, what methods do you use to ensure you've done your due diligence in not unleashing something actually harmful on your clients? I have my own thoughts, such as googling and superficial|deep code reviews, but ultimately my concern is over the malcious hiding of intentions. Thanks for any insights and suggestions. - Jeff
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | RE: SQL injection, Hecber Cordova |
|---|---|
| Next by Date: | Re: SQL injection, Tim |
| Previous by Thread: | RE: SQL injection, Hecber Cordova |
| Next by Thread: | RE: Exploit Repositories and Due Diligence, Leandro Reox |
| Indexes: | [Date] [Thread] [Top] [All Lists] |