Full Disclosure mailing list archives

Presentation / Paper : Demystifying Penetration Testing


From: "Debasis Mohanty" <mail () hackingspirits com>
Date: Tue, 26 Oct 2004 22:34:21 +0530

Hi All, 

This is to announce the release of a presentation / paper on PenTesting
by HACKINGSPIRITS called "Demystifying Penetration Testing". It is
mostly targeted for those who are new to Penetration Testing (i.e.
Security Officers / Sys Admins / Security Auditors / Security
Enthusiasts.etc). This presentation will give a clear picture on how pen
testing is done and what are the expected results. Various screenshots
are provided as a proof of concepts to give a brief picture of possible
end-results. 

The goals of this presentation / paper are as follows: 

- An overview of how Vulnerability Assessment (VA) & Penetration Testing
(PT) is done
- Defining scope of the assessment
- Types of Penetration Testing
- A brief understanding on how Buffer Overflow works
- How vulnerabilities are scanned and exploited
- What are the end results
- What a Penetration Testing Report should contain

 

It can be downloaded from the following link: 
http://www.hackingspirits.com/eth-hac/papers/whitepapers.asp



Debasis Mohanty
www.hackingspirits.com



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: