I Agree with an earlier reply, don't EVER say they have no vulnerabilities.
There's always vulnerabilities its whether you and your tools find them or not.
Reading Book: The Manager's Guide to Becoming Great
--- On Wed, 4/9/08, Atif Azim <azim.atif@gmail.com> wrote:
From: Atif Azim <azim.atif@gmail.com>
Subject: Pen testing techniques
To: pen-test@securityfocus.com
Date: Wednesday, April 9, 2008, 12:48 PM
Hello,
I am new to pen testing and am currently involved in doing
an external
pen test for one of our clients.We are doing it through
Core
Impact.Reconnaisance showed only port 80 as open and the
web server
running IIS 6.0.Core Impact did not find any
vulnerabilities in the
server and hence was unable to penetrate.The web
application was also
tested for SQL Injection and PHP remote file inclusion and
did not
find any vulnerabilities there either.
My question is what else can we do besides relying on Core
Impact for
this pen test.And what impression can a client get if we
say to them
that there are no vulnerabilites in your network or web
app.Its
dificult to digest something like that for a security
specialist that
everythings alright.
Looking forward to some great views.Thanks.
Regards,
Atif Azim
------------------------------------------------------------------------
This list is sponsored by: Cenzic
Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!
http://www.cenzic.com/downloads
------------------------------------------------------------------------
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
------------------------------------------------------------------------
This list is sponsored by: Cenzic
Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!
http://www.cenzic.com/downloads
------------------------------------------------------------------------
