Re: pen test

[Gregory Boyce <gregory.boyce () gmail com>]

Its not so much "no" as "not without their authorization".

If you're a large enough customer they may let you try.  Be sure to  
get the authorization in writing though in case your test causes  
problems and they try to take legal action.

Unless you really know what you're doing I wouldn't recommend it.

--
Gregory Boyce

On Dec 10, 2007, at 7:53 PM, "Michael R. Martinez" <mike () security-bounce com 
> wrote:

> Marty,
>
> absolutely not, this is called hacking. Pen testing is actively  
> exploiting a server, identifying a weakness exploiting gaining  
> access. Are you talking about scanning ports? Could you provide a  
> little more detail. If you mean pen-testing, then the answer is no.
>
> Cheers
> ------Original Message------
> From: Marty Resnick
> Sender: listbounce () securityfocus com
> To: security-basics
> Sent: Dec 10, 2007 9:35 AM
> Subject: pen test
>
> Am I able to pen test or run a vulnerability assessment on my web  
> hosting company. I got the idea after reading this article. http://www.securitypark.co.uk/Security_article.asp?articleid=260173
>
> --
> Marty Resnick
> Techmaking Inc.
> (877) 291-1110 (office)
> (661) 209-2089 (mobile)
> (805) 512-9603 (fax)
> marty () techmaking com
>
>
>
> Michael R. Martinez
> TF: 800-987-7307