Re: [PEN-TEST] First step of a pen-test

["Stiles, Robert" <bob.stiles () TGSLC ORG>]

I started with Altavista and Deja - and was amazed at the amount of
information regarding infrastructure, hardware and software used was
freely and publicly available.  E-mail headers on mailing list archives
are a font of great stealthy information.

-----Original Message-----
From: Christopher M. Bergeron [mailto:ChrisB () HGSS COM]
Sent: Monday, September 18, 2000 1:39 PM
To: PEN-TEST () SECURITYFOCUS COM
Subject: [PEN-TEST] First step of a pen-test


What is the industry norm for _beginning_ a pen-test after the contract has
been made?