Structuring a Penetration Testing Agreement
When performing penetration tests, the signed agreements you have in place may be your best friend or worst enemy. The
Read moreIT Security
IT Security
Methodologies and Standards Penetration Test
There are several well-known penetration testing methodologies and standards. OWASP The Open Web Application Security Project (OWASP) has developed a
Read moreOrganization of the Penetration Testing Team
The organization of the penetration testing team varies from job to job, but the following key positions should be filled
Read moreLocations of the Penetration Test
Determining the locations in scope is critical to establishing the amount of travel and the level of effort involved for
Read moreScope of a Penetration Test
Scope is probably the most important issue when planning a penetration test. The test may vary greatly depending on whether
Read morePlanning a Penetration Test
Types of Penetration Tests There are basically three types of penetration testing: white box, black box, and gray box. White
Read moreMetasploit: The Big Picture
Metasploit is a free, downloadable framework that makes it very easy to acquire, develop, and launch exploits for computer software
Read moreUpdating BackTrack
The BackTrack developers maintain a repository of the latest version of all tools contained in the distribution. You can update
Read moreBackTrack: The Big Picture
BackTrack is a free, well-designed penetration-testing Linux workstation built and refined by professional security engineers. It has all the tools
Read moreDefending Against Insider Attacks
In order for a company to defend itself against an insider attack, it must first give up the notion that
Read more