RE: Pen tester

["Kevin Ortloff" <Kevin.Ortloff () j2global com>]

Nessus is great for a mixed environment. Good reporting, understandable
and has references to other links for more info.

GFI LanGaurd is great for Windows environments and can do much more than
a scan, it can push updates, show installed apps, and a few other useful
things.

Metasploit is hard to understand, but great for deeper analysis and
actually attacking a machine ( my favorite )

You can also use WebScarBar for webservers. I just downloaded/installed
it but have not figured it out yet.... Seems a little advanced too, but
I'm going to work on it next month sometime....It's like a packet
capture ( before send ) so you can modify the gets,posts,etc before
sending to the server. This would be more for attempting to XXS or SQL
inj. Cool idea though. I can't wait to play.

Hope this helps :)



 

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of hkshimulbd () gmail com
Sent: Saturday, March 15, 2008 9:00 PM
To: security-basics () securityfocus com
Subject: Pen tester

Hi all,

 

I am working in a Telco as Assistant Manager, Information Security and
we want to use commercial scanner for pen testing (port scanning,
vulnerability scanning, exploit, password attack etc.).

Please provide me information what are the best pen testers and why?

 

 

Regards,

 

Md. Humayun Kabir (Shimul)

[CCSP,MCSE,MCDBA]



This email, its contents and attachments contain information from j2 Global Communications, Inc. and/or its affiliates 
which may be privileged, confidential or otherwise protected from disclosure. The information is intended to be for the 
addressee(s) only.  If you are not an addressee, any disclosure, copy, distribution, or use of the contents of this 
message is prohibited.  If you have received this email in error please notify the sender by reply e-mail and delete 
the original message and any copies. j2 Global Communications. 6922 Hollywood Blvd., Hollywood, CA 90028.