Re: Vulnerability vs. Pen test

[James Lay <jlay () slave-tothe-box net>]

> So part of PCI DSS requirements are for a quarterly vulnerability
> assessment, and a yearly pentest.  My question is:  is Nessus considered
> just a vulnerability scanning app?  Thanks.
>
> James


Thanks for all the feedback on this.  Guess my next question then is what
type of apps does one use to pen test windows boxes and routers and
switches?  I've seen a lot of sql pen test and web pen test stuff here, but
not much for the Windows and router/switches.  Thanks again all.

James



------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Tired of using other people's tools? Why not learn how to write your own exploits? 
InfoSec Institute's Advanced Ethical Hacking class teaches you how to write stack and heap buffer overflow exploits for 
Windows and Linux. Gain your Certified Expert Penetration Tester (CEPT) cert as well. 

http://www.infosecinstitute.com/courses/advanced_ethical_hacking_training.html
------------------------------------------------------------------------