I had a demo account with Edgeos.com. Not bad stuff, actually worked
pretty well. Imagine a web based user-friendly nessus front end with
a lot of customizations and some extra reporting options. It was
slick, possibly slick enough to subscribe to if you really want a
periodic check from the outside. I'd recommend it to the right kind
of person, but it's not for everyone. They also have "branding"
ability so that you can re-sell their services if you wish. That'd be
more for you startup security company types, or computer/network
consultants that want to add a little net-sec to their menu, I
suppose.
Samspade.org has always been a mainstay for me. They offer online
web-based tools. If I have access to a Windows laptop, their windows
based tool offers a lot of stuff in a small package that can cut down
the time it takes to do certain pre-vuln-scanning stuff.
Church Of The Swimming Elephant (www.cotse.com) also had some cool
online stuff at one time. I haven't been there in ages. They may
have added or removed stuff since I've been there last. I just did a
quick check to make sure it was still the same site (not a squatter or
something) and nothing more.
Cheers and best of luck!
--Noah
On 1/25/06, Alvin Oga <alvin.sec@mail.linux-consulting.com> wrote:
hi ya
On Tue, 24 Jan 2006, Ivan . wrote:
A good online traceroute
http://networking.ringofsaturn.com/Tools/traceroute.php
how does traceroute help you with pen-test??
other than it telling you on the inside, how you got to the
outside
Here is my personal favorite list of on-line pen test tools:
http://www.xs4all.nl/~kazil/testfiles/index.htm
The idea is that you can sit at a customer's terminal and by just
"clicking
around"
you can perform a quick assessment of the perimeter security and content
scanning.
do an "online update" and see how long ago since they'd maintained their
boxes with "FREE" updates
You don't need to install or run anything. Everyting runs from external
(public) websites.
always a good way to do things
Do you have some of your own favorites to add to this list?
too many to list, but to list in one line:
http://Linux-Sec.net
- find your favorite sites with:
- these online scanners/tests are from outside public sites
and intended to see how secure your client box is that you're
sitting on and clicking away
- online port scanners
- online nessus scanners
- online dns scanners
- online apache scanners
- online firewall testers
- online open relay tests
- online virus scanners of incoming virus
... on-n-on ...
c ya
alvin
------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:
Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for
vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers
do!
Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------
--
http://www.FocusHacks.com - The Ford Focus Modification Site!
--
http://www.FocusHacks.com - The Ford Focus Modification Site!
------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:
Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------
