Home page logo

pen-test logo Penetration Testing mailing list archives

Re: My Frustrations
From: "M.B.Jr." <marcio.barbado () gmail com>
Date: Thu, 18 Dec 2008 22:41:51 -0200

On Thu, Dec 18, 2008 at 9:44 AM, Jamie Riden <jamie.riden () gmail com> wrote:

However, just running an automated tool such as nessus/nmap/whatever
and dumping the results into a report is not nearly good enough - yes,
I have seen this in a commercial pen-test report. Ugh.

Automated tests can only be useful after you benchmarked enough a
group of targets.
That is to say, only after you have been through lots of high quality
knowledge based pen-tests in the very same group of targets. Then you
can write some scripts, for the referred targets, specifically.

Marcio Barbado, Jr.

This list is sponsored by: Cenzic

Security Trends Report from Cenzic
Stay Ahead of the Hacker Curve!
Get the latest Q2 2008 Trends Report now


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]