Home ›

penetration testing

Application security beyond the scanner monkey November 13

in

Matt Fisher of Piscis Security gave a discussion about security beyond the "scanner monkey" phase. Scanner monkeys being people who run a scanner tool, get the output, and think they are done with a vulnerability assessment. There are more and more scanners - commercial, proprietary, and open source - and yet they are no longer good enough.

  • The scanners only start the process, they don't end it.
  • The person running the scanner is likely not talented enough to configure it properly.

Using Watcher to make pen testing more efficient November 12

in

The Watcher session was basically a sales pitch and demo for the Watcher tool, though it's a free tool so "sales pitch" is not exactly right. Watcher is an open source tool that sites inside of Fiddler which is a web proxy useful for debugging web applications.

The application is a windows only tool.

Syndicate content