Penetration Testing mailing list archives
RE: Programming skills for Pen Testers
From: "Sahir Hidayatullah" <sahirh () mielesecurity com>
Date: Sat, 11 Feb 2006 14:35:52 +0530
I would say that C is the gold standard of programming languages for security work. You'll find most PoC code in C as well, so it obviously helps to be able to understand it. C++ would serve you better for application development, specifically OOP. That said, I believe knowing a couple of quick scripting style languages really helps when you need to whip up a tool in a hurry. I've recently fallen in love with Ruby www.ruby-lang.org, thanks in no small part to its adoption by the Metasploit Project. I urge all of you to have a look at it since it's both powerful and intuitive. Those who are already familiar with Perl or Python will find it a breeze to pick up. Cheers, Sahir Hidayatullah. -----Original Message----- From: johnny Mnemonic [mailto:security4thefainthearted () hotmail com] Sent: Friday, February 10, 2006 11:12 AM To: pen-test () securityfocus com Subject: Programming skills for Pen Testers ok we all know that in addition to good network, host and application security skills, programming in C is a pre-requisite for a decent pen tester or at least one who wants to write their own security tools or simply audit the open source code they use. My question is, despite their similarities should a pen tester be concentrating on C or C++ ? That's it! Thanks. _________________________________________________________________ Get MSN Hotmail alerts on your mobile. http://mobile.msn.com/ac.aspx?cid=uuhp_hotmail ---------------------------------------------------------------------------- -- Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 ---------------------------------------------------------------------------- --- ------------------------------------------------------------------------------ Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 -------------------------------------------------------------------------------
Current thread:
- Programming skills for Pen Testers johnny Mnemonic (Feb 10)
- RE: Programming skills for Pen Testers Terry Vernon (Feb 10)
- RE: Programming skills for Pen Testers Muhammad Omar Khan (Feb 11)
- Re: Programming skills for Pen Testers Justin Ferguson (Feb 10)
- Re: Programming skills for Pen Testers FocusHacks (Feb 11)
- Re: Programming skills for Pen Testers intel96 (Feb 12)
- RES: Programming skills for Pen Testers 7978488 (Feb 12)
- Re: Programming skills for Pen Testers intel96 (Feb 12)
- Re: Programming skills for Pen Testers thomas springer (Feb 11)
- Re: Programming skills for Pen Testers pagvac (Feb 11)
- RE: Programming skills for Pen Testers Sahir Hidayatullah (Feb 11)
- <Possible follow-ups>
- RE: Programming skills for Pen Testers Shenk, Jerry A (Feb 11)
- RE: Programming skills for Pen Testers jeremiah (Feb 11)
- RE: Programming skills for Pen Testers Craig Wright (Feb 12)
- RE: Programming skills for Pen Testers johnny Mnemonic (Feb 12)
- Re: Programming skills for Pen Testers Jeremy Saintot (Feb 28)
- Re: Programming skills for Pen Testers Justin Ferguson (Feb 28)
- RE: Programming skills for Pen Testers Craig Wright (Feb 12)
- RE: Programming skills for Pen Testers Boogiebruva (Feb 18)
- RE: Programming skills for Pen Testers Boogiebruva (Feb 18)
- RE: Programming skills for Pen Testers Terry Vernon (Feb 10)