Penetration Testing: RE: Programming skills for Pen Testers

["Terry Vernon" <tvernon24 () comcast net>]

Since programming skills aren't a "have it or die" requirement to do the job
it would seem it's all up to preference. I would say however, from
preference, that learning C opened up several pathways for me when I was
getting into pen-testing, which was a graduated path that came after my
script kiddy period. Also knowing C gives the ability to read almost every
other major coding language used in app development today with minimal trips
to Google. 

I'd say if you know one, you can wing it in the other. So go with the one
you feel most comfortable with. I'd pick C for its historic value and the
fact that C++ is simply C with improvements.

-Terry

-----Original Message-----
From: johnny Mnemonic [mailto:security4thefainthearted () hotmail com] 
Sent: Thursday, February 09, 2006 11:42 PM
To: pen-test () securityfocus com
Subject: Programming skills for Pen Testers 

ok we all know that in addition to good network, host and application 
security skills, programming in C is a pre-requisite for a decent pen tester

or at least one who wants to write their own security tools or simply audit 
the open source code they use. My question is, despite their similarities 
should a pen tester be concentrating on C or C++ ? That's it!

Thanks.

_________________________________________________________________
Get MSN Hotmail alerts on your mobile. 
http://mobile.msn.com/ac.aspx?cid=uuhp_hotmail


----------------------------------------------------------------------------
--
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are

futile against web application hacking. Check your website for
vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers
do! 
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
----------------------------------------------------------------------------
---


------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------