Penetration Testing: Re: Tools to use for Penetration Testing?

[philip.finn () uscellular com]

Being a White hat/Hacker is not about the tools any body can take Core impact and exploit a vulnerability that has 
already been written for them.  If you want to be a pen tester you need to understand the exploits themselves and how 
they actually work.  You need to be able to understand machine code so that you can spot a buffer overflow in poorly 
written code.  You should understand sql query language so that you can test for sql injection.  You need to understand 
exactly how network protocols work.  The tools will come with the understanding of these types of technology.  I'm sure 
any number of people on this list can rattle off tools but if you don't understand what the tools are used for then 
they are pointless.

Phil  

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in 
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------