Re: RE: PCI DSS Scanners

["Adam Pal" <pal_adam () gmx net>]

Hi,

As previously suggested you may want to have a look at Backtrack, especially OpenVAS. This is a pretty good 
vulnerability scanner, personaly i prefer to use it with the greenbone - frontend.
But once you use nessus i think you can achieve similar results with that one, especialy if you have a commercial 
licence. 
For proof of the concept you can use metasploit framework (i think this can be linked to neXpose).


regards,
Adam 

 
 -----Original Message-----
 From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
 On Behalf Of pentester () surfhier nl
 Sent: 11 April 2012 16:27
 To: skiera99
 Cc: security-basics () securityfocus com
 Subject: Re: PCI DSS Scanners
 
 Outscan PCI - http://www.outpost24.com/outscan-pci
 
 Quoting skiera99 <skiera99 () gmail com>:
 
> Hi all,
>
> I need to perform a PCI DSS scan for one client. I am looking for the 
> frameworks to do that. So far I tried:
> - Nessus
> - Rapid7 NeXpose
>
> Do you know anything else?
>
> ----------------------------------------------------------------------
> -- Securing Apache Web Server with thawte Digital Certificate In this 
> guide we examine the importance of Apache-SSL and who needs an SSL 
> certificate.  We look at how SSL works, how it benefits your company 
> and how your customers can tell if a site is secure. You will find out 
> how to test, purchase, install and use a thawte Digital Certificate on 
> your Apache web server. Throughout, best practices for set-up are 
> highlighted to help you ensure efficient ongoing management of your 
> encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4
> 42f727d1
> ----------------------------------------------------------------------
> --
 

-- 
NEU: FreePhone 3-fach-Flat mit kostenlosem Smartphone!                                  
Jetzt informieren: http://mobile.1und1.de/?ac=OM.PW.PW003K20328T7073a

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------