Nessus is great for a mixed environment. Good reporting, understandable
and has references to other links for more info.
GFI LanGaurd is great for Windows environments and can do much more than
a scan, it can push updates, show installed apps, and a few other useful
things.
Metasploit is hard to understand, but great for deeper analysis and
actually attacking a machine ( my favorite )
You can also use WebScarBar for webservers. I just downloaded/installed
it but have not figured it out yet.... Seems a little advanced too, but
I'm going to work on it next month sometime....It's like a packet
capture ( before send ) so you can modify the gets,posts,etc before
sending to the server. This would be more for attempting to XXS or SQL
inj. Cool idea though. I can't wait to play.
Hope this helps :)
-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of hkshimulbd@gmail.com
Sent: Saturday, March 15, 2008 9:00 PM
To: security-basics@securityfocus.com
Subject: Pen tester
Hi all,
I am working in a Telco as Assistant Manager, Information Security and
we want to use commercial scanner for pen testing (port scanning,
vulnerability scanning, exploit, password attack etc.).
Please provide me information what are the best pen testers and why?
Regards,
Md. Humayun Kabir (Shimul)
[CCSP,MCSE,MCDBA]
This email, its contents and attachments contain information from j2 Global
Communications, Inc. and/or its affiliates which may be privileged,
confidential or otherwise protected from disclosure. The information is
intended to be for the addressee(s) only. If you are not an addressee, any
disclosure, copy, distribution, or use of the contents of this message is
prohibited. If you have received this email in error please notify the sender
by reply e-mail and delete the original message and any copies. j2 Global
Communications. 6922 Hollywood Blvd., Hollywood, CA 90028.
