Security Basics mailing list archives
Re: pen test
From: Gregory Boyce <gregory.boyce () gmail com>
Date: Tue, 11 Dec 2007 20:31:10 -0500
Its not so much "no" as "not without their authorization".If you're a large enough customer they may let you try. Be sure to get the authorization in writing though in case your test causes problems and they try to take legal action.
Unless you really know what you're doing I wouldn't recommend it. -- Gregory BoyceOn Dec 10, 2007, at 7:53 PM, "Michael R. Martinez" <mike () security-bounce com > wrote:
Marty,absolutely not, this is called hacking. Pen testing is actively exploiting a server, identifying a weakness exploiting gaining access. Are you talking about scanning ports? Could you provide a little more detail. If you mean pen-testing, then the answer is no.Cheers ------Original Message------ From: Marty Resnick Sender: listbounce () securityfocus com To: security-basics Sent: Dec 10, 2007 9:35 AM Subject: pen testAm I able to pen test or run a vulnerability assessment on my web hosting company. I got the idea after reading this article. http://www.securitypark.co.uk/Security_article.asp?articleid=260173-- Marty Resnick Techmaking Inc. (877) 291-1110 (office) (661) 209-2089 (mobile) (805) 512-9603 (fax) marty () techmaking com Michael R. Martinez TF: 800-987-7307
Current thread:
- Re: pen test Michael R. Martinez (Dec 10)
- RE: pen test Worrell, Brian (Dec 12)
- Re: pen test Michael R. Martinez (Dec 12)
- RE: pen test Worrell, Brian (Dec 12)
- Re: pen test Michael R. Martinez (Dec 12)
- Re: pen test Ken . Carty (Dec 12)
- Re: pen test Michael R. Martinez (Dec 12)
- RE: pen test Craig Wright (Dec 12)
- RE: pen test Worrell, Brian (Dec 12)
- Re: pen test Serg B (Dec 12)
- RE: pen test Craig Wright (Dec 12)
- RE: pen test Worrell, Brian (Dec 13)
- <Possible follow-ups>
- pen test Marty Resnick (Dec 10)
- Re: pen test Albert R. Campa (Dec 12)
- RE: pen test Jayson Agagnier (Dec 12)