Another nice feature is the ability to use an eEye Retina scan output as
input for the CI assessment. Helps to automate the pen-test process
quite a bit.
Signed,
Andre Derek Protas
Security Researcher
eEye Digital Security
aprotas@eeye.com
-----Original Message-----
From: boxerb [mailto:boxerb@optusnet.com.au]
Sent: Tuesday, June 21, 2005 2:41 PM
To: 'Security Professional'; pen-test@securityfocus.com
Subject: RE: Core Impact
Hi Red,
We are currently using CI as our main pen testing
platform. Out of the top three frameworks, (Core, CANVAS and Metasploit)
it is definitely the most professional and easy to use. The GUI is quite
intuitive and updates for new exploits come out quite often, sometimes
every week. Previously we were using a number of open source tools
(everyone on the team had their favorites) and, as such, standardization
across the entire pen testing process was a little hit and miss. I
certainly recommend it if you can afford the inflated price tag.
Cheers.
B0xer
#########################################
"An eye for an eye will leave us all blind"
Ghandi
#########################################
Falun Gong - Stop the repression
-----Original Message-----
From: Security Professional [mailto:redteamer@gmail.com]
Sent: Tuesday, 21 June 2005 10:02 PM
To: pen-test@securityfocus.com
Subject: Core Impact
Hey folks. I was just wondering if anyone out there has tried the
Core Impact product, or even better, purchased it and currently uses
it. If so, would you be so kind as to send me a quick down and dirty
of how you feel about this product? I am in the process of looking at
it and before I move any further, I would like to have the community's
thoughts on this Company and their product. Any comments would be
appreciated.
P.S. - Don't feel you have to post them publicly. Just send them
directly to me, unless you feel it is something everyone will benefit
from.
