Re: Vulnerability assessment with remediation tool

[YGN Ethical Hacker Group <lists () yehg net>]

Vulnerability Assessment (VA)

Nessuss - free and commercial
OpenVAS - OSS
NeXpose - free and commercial
Qualys - free and commercial
IIS (IBM) - commercial

Our experience shows that one scanner might miss the vulnerability one
can find; sometimes - false positives. Here, PT is needed to confirm.


Penetration Test (PT)

BT, Knoppix, NST, ...etc



---------------------------------
Best regards,
YGN Ethical Hacker Group
Yangon, Myanmar
http://yehg.net
Our Lab | http://yehg.net/lab
Our Directory | http://yehg.net/hwd



On Fri, Sep 10, 2010 at 4:51 AM, Joe Saselli <jsaselli () real com> wrote:
> I absolutely recommend using backtrack 4 / metasploit
>
> On 9/9/10 12:47 PM, Justin Andrusk wrote:
> > Or bt4
> > Sent by Blackberry. Spelling errors may occur.
> >
> > Justin Andrusk - ESA
> >
> >
> >     ----- Original Message -----
> >     From: "Romero, Israel" [ir808w () intl att com]
> >     Sent: 09/09/2010 02:26 PM AST
> >     To: "ajay.cedt () gmail com"<ajay.cedt () gmail com>;
> > "security-basics () securityfocus com"<security-basics () securityfocus com>;
> > "joshi.komban () caridianbct com"<joshi.komban () caridianbct com>
> >     Subject: RE: Vulnerability assessment with remediation tool
> > Or you can try with knoppix
> >
> >
> >
> > -----Original Message-----
> > From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> > On
> > Behalf Of ajay.cedt () gmail com
> > Sent: Jueves, 09 de Septiembre de 2010 10:55 a.m.
> > To: security-basics () securityfocus com; joshi.komban () caridianbct com
> > Subject: RE: Vulnerability assessment with remediation tool
> >
> > why do not you start with backtrack? easy and free with almost all
> > required
> > features
> >
> > -----------------------
> > Sent via MVL Connect
> >
> >
> >  ---Original Text---
> >  From: joshi.komban () caridianbct com
> > Sent: Thu Sep 9 2010 21:01:35
> > To: security-basics () securityfocus com;
> > Subject: Vulnerability assessment with remediation tool
> > ---------------------------------------
> > Anyone has any good suggession on the tools that is availbale in the
> > market
> > in the areas of Vulnerability assessement + remediation in single product?
> >
> > ------------------------------------------------------------------------
> > Securing Apache Web Server with thawte Digital Certificate
> > In this guide we examine the importance of Apache-SSL and who needs an SSL
> > certificate.  We look at how SSL works, how it benefits your company and
> > how your customers can tell if a site is secure. You will find out how to
> > test, purchase, install and use a thawte Digital Certificate on your
> > Apache
> > web server. Throughout, best practices for set-up are highlighted to help
> > you ensure efficient ongoing management of your encryption keys and
> > digital
> > certificates.
> >
> >
> > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> >
> > ------------------------------------------------------------------------
> >
> >
> >
> > ------------------------------------------------------------------------
> > Securing Apache Web Server with thawte Digital Certificate In this guide
> > we
> > examine the importance of Apache-SSL and who needs an SSL certificate.  We
> > look at how SSL works, how it benefits your company and how your customers
> > can tell if a site is secure. You will find out how to test, purchase,
> > install and use a thawte Digital Certificate on your Apache web server.
> > Throughout, best practices for set-up are highlighted to help you ensure
> > efficient ongoing management of your encryption keys and digital
> > certificates.
> >
> >
> > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> >
> > ------------------------------------------------------------------------
> >
> >
> >
> >
> > ------------------------------------------------------------------------
> > Securing Apache Web Server with thawte Digital Certificate
> > In this guide we examine the importance of Apache-SSL and who needs an SSL
> > certificate.  We look at how SSL works, how it benefits your company and how
> > your customers can tell if a site is secure. You will find out how to test,
> > purchase, install and use a thawte Digital Certificate on your Apache web
> > server. Throughout, best practices for set-up are highlighted to help you
> > ensure efficient ongoing management of your encryption keys and digital
> > certificates.
> >
> >
> > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> > ------------------------------------------------------------------------
>
> --
> __
>
> Joe Saselli
> Manager - Global Information Systems Security&  Network Engineering
> Global Infrastructure Operations
> Shared Services Division-TPS
>
> MIT - Information Technology, Internet Security
> BIT - Information Technology, Systems Administration
> ITIL Certified
>
> GIO - Real Networks, Inc.
> 2601 Elliott Avenue
> Seattle, WA 98121
>
> jsaselli () real com
>
> Office: +1.206.892.6058
> Mobile: +1.206.499.0228
>
> www.real.com
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL
> certificate.  We look at how SSL works, how it benefits your company and how
> your customers can tell if a site is secure. You will find out how to test,
> purchase, install and use a thawte Digital Certificate on your Apache web
> server. Throughout, best practices for set-up are highlighted to help you
> ensure efficient ongoing management of your encryption keys and digital
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------