Web Site Security and Pen testing – overtly and covertly

[unclex]

Web Site Security and Pen testing – overtly and covertly

I wanted to start a web site security chat.

I would say this would be a staged information flow.

We have all done those hack the web site challenge and some of us have completed this.

And it is now time to talk about the methods and applications, from hiding your identity while applying the pen test.

The point of this is to get some sort of process.



1. Picking the right connection and hardware for your Pen test.
2. Hiding your identity
3. surveying the target
3.?
4.?
5? etc

I will add new ones when we have discussed the first topic

Picking the right connection and hardware for your Pen test.

I will try and add information on this subject tonight, but if anyone wants to start – If I see threads that are a waste of time and have no content information, they will be deleted.

[unclex]

Picking the right connection and hardware for your Pen test.



Well

Hardware


Covertly

If you are going to do this covertly, I would state that I can not help you with regards to hardware - identity is the issue MAC addresses of the network card - records of information that will or has been left on the hard drive, etc.


Overtly

It is important to think about the hard ware you are going to use.

PC

Fast systems are needed for windows.

Not so fast systems to be used with Linux.

Drive space and ram - important


I would use two PC's one with windows 2000/98 and the other running Linux for tool that tend to be better for the job in hand.

Network Cards

ADSL

One or two network cards

Well if you have permission to make the entry then you do not have to worry were the network card was purchased or the MAC address etc (Please note that MAC addresses can be traced to a point of sale) Buying a old 10/100 from a fair is a cheap option if you do not have a network card.

Modems

Slow but for mobile work this would be the way to go with a dual boot Laptop running 2000/98 and linux

Wireless

Again wireless cards are network cards with MAC addresses
mmmmmmmmm covert - lots of free wireless Access Points about.

Well that is the start of the hardware - please add some info that you think you may require.