Re: Pen-Testing New Server - Where to start?

[theosdguy () itsnate com]

Create a threat model; use tools such as nmap to get a topology.

After you can get some details try to get the next layer and so on

Setup some debug hooks, run a fuzzer, pipe /dev/random into listening handles