Penetration testing

mrweasel · Posted: Thu, 22 Jul 2010 12:50:09 Post Subject: Penetration testing

I need to do some penetration testing for a customer. Does anyone know of a cheap/free piece of software that does a decent job? I realize that free may lack a ton of features but I really just need something basic.

Charlie · Posted: Thu, 22 Jul 2010 13:21:38 Post Subject:

I believe they have a limited free demo that might do what you want....

http://www.nessus.org/nessus/

Charlie · Posted: Thu, 22 Jul 2010 13:24:52 Post Subject:

Here's another one....Cain & Abel

http://www.oxid.it/cain.html

BeerCheeze · Posted: Thu, 22 Jul 2010 13:31:00 Post Subject:

For gawds sake, if you don't know what your doing. Don't do it! Either one of those tools can bring down their network, and cause permanent damage.

Also there is not a single tool that can be use for Pen testing. It's a process that will start with several tools, and depending on those results lead to other tools/techniques.

By doing a pen test with out the knowledge you need, you are assuming MASSIVE risks. I know of professionals that during their tests, crossed the line and we're held personally liable for it. That liability can be both financial, as well as criminal. If your not a professional pen tester, you don't even know where the line may be.

Seriously... back away from this. If this company needs that work, direct them to a company that does it. Which BTW, it's pretty expensive.

BeerCheeze · Posted: Fri, 23 Jul 2010 13:32:08 Post Subject:

Ok, He wants to do a simple port scan. NMAP is a great tool for this, and if you don't go insane with it; just use simply options and even use the "-T polite" option it shouldn't cause any harm.

**Doctor Feelgood** · Posted: Sun, 25 Jul 2010 10:36:28 Post Subject:

I'm surprised at the maturity of this group. Such a great topic, and no giggling or snickering! WTF

mrweasel · Posted: Tue, 27 Jul 2010 09:21:12 Post Subject:

I was expecting it...I'm disappointed in you guys, but thanks for all the help.

anerky99 · Rated XXX Joined: 06 Apr 2009 Posts: 219 Location: UK

I only opened this thread beliveing it to be some kinda joke thread lmao. I was upset when there wasnt a single joke about it haha. Ahwell, i shall go on my buisness without knowing what the test is because i really dont fancy typing it into google lmao.

mrweasel · Posted: Thu, 02 Sep 2010 20:55:20 Post Subject:

thanks for all the advice fellas, ended up the AngryIP did exactly what the customer needed, they just couldn't explain what they wanted. Rolling Eyes

That could have ended poorly

BeerCheeze · Posted: Thu, 02 Sep 2010 22:08:14 Post Subject: