An excellent online pen-test tool

From: Rogie AkHeim (rogie_at_iname.com)
Date: 11/26/03

  • Next message: Thomas Kerbl: "finding dyndns names for existing IP" 
    Date: 26 Nov 2003 00:10:41 -0000
To: pen-test@securityfocus.com
    ('binary' encoding is not supported, stored as-is)

    An excellent online tool is one that is fast, free, unrestricted and is not trying to constantly sell you something. AuditMyPC.com meets those guidelines.

    I agree that there is no substitute for understanding what processes own TCP and UDP endpoints. For most users, a drop to DOS and interpreting the results of netstat’s output is not such a simple task. (use TCPView for this)

    This site offers a host of other tests and security related material that the average user would otherwise find difficult to obtain.

    The fact is, most users disregard what is running on the OS and rely upon a firewall to block the open ports. For these users, a remote scan can yield very useful results.

    As for social engineering, a site could pose as a legitimate vulnerability assessment service, but they wouldn’t last more than a few months.

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------

  • Next message: Thomas Kerbl: "finding dyndns names for existing IP"