Re: Dreaming of Summer

[David Maynor <dave () 0dayspray com>]

> Say a WH is contracted to do pentesting, she wanders into an environment
> secured against known vulnerabilities, uses a 0day and then what does she
> report? "You're still vulnerable! I got in. Here's proof. Can't tell you
> how I did it: proprietary tools, trade secrets, etc etc."
I forgot to mention the NDA. I would not perform a pentest that did not
have a NDA in place not to disclose to tools and techniques i used.
There are more than just 0day to consider here. For instance if i worte
an autorooter for the last 4 MS remote holes, and I use that for
pentests, I don't want copies of that floating around.
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://www.immunitysec.com/mailman/listinfo/dailydave