RE: An idiot question

["Richard Zaluski" <rzaluski () ivolution ca>]

I agree with Todd.

There is no one stop shop on this topic.  
Read and test tools.  
See what works and what does not.

Set up a test network and try them out, see what happens!


Richard Zaluski, CCNA, CRCP
CISO, Security and Infrastructure Services 
iVolution Technologies Incoporated
905.309.1911
866.601.4678
905.524.8450 (Pager)
www.ivolution.ca
rzaluski () ivolution ca
 

=======================================================================
=== CONFIDENTIALITY NOTICE: This email message, including any 
attachments, is for the sole use of the intended recipient(s) and may 
contain confidential and privileged information. If you are not the 
intended recipient, please contact the sender. Any unauthorized review, 
use, disclosure, or distribution is prohibited.
=======================================================================
===
 
PGP Key-ID: 85544DB6
PGP Key fingerprint: 0CD3 FB61 EAF1 11CA 8EC4  513A 75F2 6FC0 8554
-----Original Message-----
From: Todd Towles [mailto:toddtowles () brookshires com] 
Sent: Tuesday, October 26, 2004 3:30 PM
To: Profeta; pen-test () securityfocus com
Subject: RE: An idiot question

Run over to insecure.org and look at all the tools. Pen-test is like
controlled hacking...there is no "exactly how to do it manual" and to
tell you the truth, there really shouldn't be one.

Read, read read....and then..do do do in a controlled world. Reading
everything in sight can get you to the door with the information but
only "doing" can step you into the other room. 

> -----Original Message-----
> From: Profeta [mailto:profetago () bol com br] 
> Sent: Tuesday, October 26, 2004 10:31 AM
> To: pen-test () securityfocus com
> Subject: An idiot question
>
> Is there some sites that given an arsenal of tools to realize 
> pen tests ? I know that www.packetstormsecurity.nl is a good 
> start, but, there is another site that is more expecific to 
> download some tools ? Thanks the attention!
>
> Pr0ph3t
>
> --------------------------------------------------------------
> ----------------
> Internet Security Systems. - Keeping You Ahead of the Threat
>
> When business losses are measured in seconds, Internet 
> threats must be stopped before they impact your network. To 
> learn how Internet Security Systems keeps organizations ahead 
> of the threat with preemptive intrusion prevention, download 
> the new whitepaper, Defining the Rules of Preemptive 
> Protection, and end your reliance on reactive security technology. 
>
> http://www.securityfocus.com/sponsor/ISS_pen-test_041001
> --------------------------------------------------------------
> -----------------

----------------------------------------------------------------------------
--
Internet Security Systems. - Keeping You Ahead of the Threat

When business losses are measured in seconds, Internet threats must be
stopped before they impact your network. To learn how Internet Security
Systems keeps organizations ahead of the threat with preemptive intrusion
prevention, download the new whitepaper, Defining the Rules of Preemptive
Protection, and end your reliance on reactive security technology. 

http://www.securityfocus.com/sponsor/ISS_pen-test_041001
----------------------------------------------------------------------------
---

Attachment: rzaluski@ivolution.ca (rzaluski@ivolution.ca).vcf
Description: