mailing list archives
RE: pen test
From: "Worrell, Brian" <BWorrell () isdh IN gov>
Date: Tue, 11 Dec 2007 07:13:41 -0500
Am I wrong, but there are lots of practices and in some cases laws that
say that you need to run vulnerability assessments to be compliant.
If you were to ask you web host in writing before doing it, that should
solve the possible "legality" issue that it sounds like you talking
As far as I know, White Hat hacking has never been illegal, if done
correctly and above board. If it was, why would SANS and other offer
Certified Hacker classes and certs?
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Michael R. Martinez
Sent: Monday, December 10, 2007 7:54 PM
To: Marty Resnick; listbounce () securityfocus com; security-basics
Subject: Re: pen test
absolutely not, this is called hacking. Pen testing is actively
exploiting a server, identifying a weakness exploiting gaining access.
Are you talking about scanning ports? Could you provide a little more
detail. If you mean pen-testing, then the answer is no.
From: Marty Resnick
Sender: listbounce () securityfocus com
Sent: Dec 10, 2007 9:35 AM
Subject: pen test
Am I able to pen test or run a vulnerability assessment on my web
hosting company. I got the idea after reading this article.
(877) 291-1110 (office)
(661) 209-2089 (mobile)
(805) 512-9603 (fax)
marty () techmaking com
Michael R. Martinez
Re: pen test Gregory Boyce (Dec 12)
Re: pen test scott (Dec 12)