From: Shenk, Jerry A (jshenk@decommunications.com)
Date: Fri Feb 10 2006 - 11:06:19 EST
I wouldn't say that programming is a requirement...possibly a basic
understanding of programming and if you're really honing in hard on
something it would be handy to know that programming language.
Pen-testing is really a lot of research and a log of trying different
stuff. If the environment you're testing is all based on MS SQL and
asp, then your C or C++ isn't really gonna be as helpful (in that
environment) as knowing how sql and asp work.
-----Original Message-----
From: johnny Mnemonic [mailto:security4thefainthearted@hotmail.com]
Sent: Friday, February 10, 2006 12:42 AM
To: pen-test@securityfocus.com
Subject: Programming skills for Pen Testers
ok we all know that in addition to good network, host and application
security skills, programming in C is a pre-requisite for a decent pen
tester
or at least one who wants to write their own security tools or simply
audit
the open source code they use. My question is, despite their
similarities
should a pen tester be concentrating on C or C++ ? That's it!
Thanks.
_________________________________________________________________
Get MSN Hotmail alerts on your mobile.
http://mobile.msn.com/ac.aspx?cid=uuhp_hotmail
------------------------------------------------------------------------
------
Audit your website security with Acunetix Web Vulnerability Scanner:
Hackers are concentrating their efforts on attacking applications on
your
website. Up to 75% of cyber attacks are launched on shopping carts,
forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers
are
futile against web application hacking. Check your website for
vulnerabilities
to SQL injection, Cross site scripting and other web attacks before
hackers do!
Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831
------------------------------------------------------------------------
-------
**DISCLAIMER
This e-mail message and any files transmitted with it are intended for the use of the individual or entity to which they are addressed and may contain information that is privileged, proprietary and confidential. If you are not the intended recipient, you may not use, copy or disclose to anyone the message or any information contained in the message. If you have received this communication in error, please notify the sender and delete this e-mail message. The contents do not represent the opinion of D&E except to the extent that it relates to their official business.
------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:
Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:30 EDT