Re: Pen-Test setup

From: Sol Invictus (sol@haveyoubeentested.org)
Date: Mon Sep 18 2006 - 19:58:29 EDT


My short answer is...

If you have to ask the question, hire someone who's qualified.

Sol.

On Tue, 2006-09-19 at 00:37 +0200, Claudio Criscione wrote:
> > Could anybody advise on the minimum setup required to perform an external
> > pen-test? Regardless of tools, what are the required bandwidth, and
> > hardware?
>
> The only good answer is "it depends".
> If you plan to do some password cracking, then you're going to need the
> fastest machine you can put your hands on.
> As for bandwidth, if you plan to do some bruteforcing you'll need a broadband
> connection - or at least a connection as fast as the one your target has.
>
> About minimum, I would say requirements are very low. Since you might want to
> run some java tools and such, I would say an entry-level pc should suffice.
> I really can't see how you would put its CPU in use.
>
> Bandwidth is more important: apart from bruteforcing, you'll do a lot of
> (port)scanning and network connection. Its VERY important,too, to makesure
> that your ISP won't mess with your connections: from my home computer I
> cannot do a full-speed nmap scan since my ISP would just drop me from the
> net, detecting it. Alas, I think any ADSL-Level connection would be enough,
> as a "minimum" level.
>
>

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:56:58 EDT