«
Expand/Collapse
48 items tagged "vulnerability assessment"
Related tags:
video [+],
black hat [+],
frank breedijk [+],
assessment data [+],
web application [+],
shah tags [+],
security [+],
nmap [+],
dimva [+],
audio [+],
web scanner [+],
web authors [+],
usa [+],
the netherlands [+],
saumil shah [+],
portable [+],
penetration [+],
multi boot [+],
metasploit [+],
katana [+],
eighth international conference [+],
conference [+],
boot security [+],
authors [+],
amsterdam the netherlands [+],
amsterdam [+],
workshops [+],
whitepaper [+],
web assessment [+],
warszawa [+],
vulnerability scanner [+],
vulnerability assessments [+],
value [+],
testing [+],
security tools [+],
scripting language [+],
realize [+],
read [+],
pen [+],
paper [+],
nse [+],
millier [+],
mastering [+],
marc ruef [+],
http [+],
hat europe [+],
fyodor tags [+],
fifield [+],
europe [+],
david fifield [+],
dave millier [+],
assessment techniques [+],
apps [+],
xprobe [+],
web server application [+],
water [+],
vulnerability research [+],
txt [+],
turn [+],
toolbox [+],
test reports [+],
tags [+],
tables turn [+],
tables [+],
slides [+],
server [+],
security assessments [+],
seccubus [+],
scripting [+],
scanning [+],
scanners [+],
run [+],
richard johnson tags [+],
revolutions [+],
renaud deraison [+],
rant [+],
proof solution [+],
project authors [+],
project [+],
process [+],
practical [+],
post [+],
penetration tests [+],
open source tools [+],
next [+],
nessus project [+],
nessus [+],
multi [+],
michael schearer [+],
management [+],
make [+],
louis [+],
larry [+],
john andreadis [+],
jeremiah grossman [+],
iviz [+],
intrusions [+],
hacking [+],
grossman [+],
grade quality [+],
generation [+],
foregone conclusion [+],
flash developers [+],
flash [+],
fire water [+],
fire [+],
fingerprinting [+],
federal [+],
erp [+],
environment [+],
enterprise vulnerability [+],
dont see [+],
don [+],
discovery exploration [+],
detection [+],
defeating [+],
day [+],
database [+],
corporate environment [+],
corporate [+],
conventional solutions [+],
chris hurley tags [+],
chris hurley [+],
cfp [+],
cannot [+],
bug [+],
bizploit [+],
autonessus [+],
automated [+],
assessments [+],
assessment web [+],
asia [+],
arkin tags [+],
application [+],
andreadis [+],
alex [+],
advanced [+],
Tools [+],
Countermeasures [+],
vulnerability [+],
assessment [+],
web [+]
-
-
21:50
»
SecDocs
-
-
21:53
»
SecDocs
-
21:53
»
SecDocs
-
-
21:43
»
SecDocs
-
-
21:42
»
SecDocs
-
-
21:29
»
SecDocs
-
-
22:51
»
SecDocs
-
-
23:54
»
SecDocs
-
-
5:14
»
SecDocs
-
-
14:10
»
SecDocs
-
-
23:20
»
SecDocs
-
1:52
»
SecDocs
-
-
0:28
»
SecDocs
Authors:
Lurene Grenier Richard Johnson Tags:
vulnerability assessment bug hunting fuzzing Event:
Black Hat USA 2010 Abstract: Much work has been presented in the past few years concerning bug discovery through fuzzing. Everything from the feasibility of exhaustive generation fuzzing, to the continued productivity of simple mutation fuzzing has been covered. This talk will assume finding bugs is a foregone conclusion, and instead discuss the pre and post fuzzing process necessary to efficiently analyze vulnerabilities for a given program to the stage where exploitability has a high confidence, and exploitation can be handed off or undertaken in house. This process will be driven by intelligent, analyst driven automation, with a focus on the continued production of exploitable bugs with a minimum of wasted effort.
-
-
5:43
»
SecDocs
Authors:
Marc Ruef Tags:
vulnerability assessment scanning Event:
Hashdays 2010 Abstract: Nmap is without doubt one of the most important tools in security testing. Initially developed as portscanner, the introduction of NSE (Nmap Scripting Language) enhanced the software heavily. NSE scripts allow to create additional tests, which may provide the functionality of a vulnerability scanner. Basic data collected by nmap and additional network requests can be used to determine software products and security flaws. The talk is discussing the possibilities of NSE scripting, the improvement of professional scanning (with a customer-based example) and current development in the field of NSE programming (my httprecon-nse port and vulscan module). Administrators and auditors will see the their benefits of automated testing.
-
5:43
»
SecDocs
Authors:
Marc Ruef Tags:
vulnerability assessment scanning Event:
Hashdays 2010 Abstract: Nmap is without doubt one of the most important tools in security testing. Initially developed as portscanner, the introduction of NSE (Nmap Scripting Language) enhanced the software heavily. NSE scripts allow to create additional tests, which may provide the functionality of a vulnerability scanner. Basic data collected by nmap and additional network requests can be used to determine software products and security flaws. The talk is discussing the possibilities of NSE scripting, the improvement of professional scanning (with a customer-based example) and current development in the field of NSE programming (my httprecon-nse port and vulscan module). Administrators and auditors will see the their benefits of automated testing.
-
-
19:14
»
Carnal0wnage
So first a disclaimer, i didnt listen to the referenced podcast, this is based solely of this blog post:
http://newschoolsecurity.com/2011/04/data-driven-pen-testsSo I’m listening to the “Larry, Larry, Larry” episode of the Risk Hose podcast, and Alex is talking about data-driven pen tests. I want to posit that pen tests are already empirical. Pen testers know what techniques work for them, and start with those techniques.
What we could use are data-driven pen test reports. “We tried X, which works in 78% of attempts, and it failed.”
We could also use more shared data about what tests tend to work.
Thoughts?
Dre's response to the post was surprising to me, he listed a bunch of tools that seem to do correlating of pentest results into a portal so you can trend over time. Cool idea, i'll give the people that. But to me when we start jumping into repeatable metrics driven stuff we are in Vulnerability Assessment land, not pentesting land.
Here is the comment I left:
I like the idea and i think it could be useful.However, they need to drop the pentest part. you are solidly into the vulnerability assessment part of things when you are talking about “ok, i tried 1,2,3,4,5 and 1 & 3 worked” ok on to the next set of tests… thats vulnerability assessment (with exploitation if you want to get technical) and not pentesting.
pentesting is about that human looking at the problem and figuring out how to break it, not some scanner, thats going to be very hard to standardize and put hard numbers on and i dont think its going to be possible without tying up your tester’s time with bullshit.
I'm all for "repeatable" pentests. You should have a methodology for each type of test, but when you are paying for human's time you should be paying for them to go after the site like a human would and not how a scanner would or not in a way where i'm worried about religiously following some checklist because if i don't the metrics get all fucked up. Your pentest should come after you have thrown the kitchen sink at it scanner wise.
as an added bonus this post was right below the new school post in my Google reader:
http://coding-insecurity.blogspot.com/2011/04/developing-good-methodology-part-3.htmlThis post and really any methodology document you will ever read or write will have gaps, because no document on this subject can ever really be 100% all inclusive of every vulnerability and the myriad of variations that exist for many of these.
I think it drives the point home as well.
-CG
-
-
21:25
»
SecDocs
-
21:25
»
SecDocs
-
-
21:25
»
SecDocs
-
-
21:25
»
SecDocs
-
21:25
»
SecDocs
-
-
21:25
»
SecDocs
-
21:25
»
SecDocs
-
-
21:25
»
SecDocs
-
21:25
»
SecDocs
-
-
21:25
»
SecDocs
Authors:
Louis Nyffenegger Tags:
web application vulnerability assessment Event:
Ruxcon 2010 Abstract: More and more organisations think an automatic web scanner can replace pentesters. Even if it may be true in some cases, I will demonstrate that most web scanners don't do a decent job and cannot be used to ensure that a website is secure. Most arguments against web scanners are based on the fact that these scanners cannot understand the business logic behind applications however, we will see that scanners are not even able to properly find vulnerabilities like SQL injections or command injection vulnerabilities. Based on commercial and open source tools, this presentation will take some examples of web vulnerabilities and go through each scanners results for good lulz.
-
-
21:25
»
SecDocs
Tags:
vulnerability assessment vulnerability Event:
Ruxcon 2010 Abstract: Technical conferences often present new and innovative research concerning vulnerability assessment, exploitation and mitigation controls. New offensive and defensive techniques have been evolving for well over a decade. In parallel to this, targeted attacks and the zero-day black-market have created a powerful underground economy that threatens the world’s wealthiest enterprises. Unfortunately in all this madness, the fundamental practice of vulnerability management has been neglected. Large enterprises often have huge IT estates ripe with technicalities, politics, and organisational constraints. It would seem that relying purely on COTS solutions to manage vulnerabilities is deemed an easy way to tick a compliance box but is never a primary fool-proof solution for managing known vulnerabilities. The goal of this presentation is to shift the mindset for how large organizations address the challenges of vulnerability management. A walk-through on architecting and implementing custom vulnerability management technologies will be done - for each component, different options will be presented where possible plus discussion on both technological and process challenges. The presentation will demonstrate that logical analysis and innovation can significantly evolve a typical COTS approach and give a more realist perspective on this difficult domain.
-
-
21:25
»
SecDocs
-
21:25
»
SecDocs
-
-
2:54
»
SecDocs
-
-
14:19
»
SecDocs
-
14:02
»
SecDocs
-
13:52
»
Packet Storm Security Recent Files
Call For Workshops Proposals for the Eighth International Conference on Detection of Intrusions and Malware and Vulnerability Assessment. This conference will be held from July 7th through the 8th, 2011 in Amsterdam, The Netherlands.
-
13:52
»
Packet Storm Security Misc. Files
Call For Workshops Proposals for the Eighth International Conference on Detection of Intrusions and Malware and Vulnerability Assessment. This conference will be held from July 7th through the 8th, 2011 in Amsterdam, The Netherlands.
-
-
19:02
»
Packet Storm Security Misc. Files
Call For Papers for DIMVA 2011, the Eighth International Conference on Detection of Intrusions and Malware and Vulnerability Assessment. This conference will be held from July 7th through the 8th, 2011 in Amsterdam, The Netherlands.