RE: QualysGuard
From: Martin (mleroux_at_lincsat.com)
Date: 08/26/04
- Previous message: DeGennaro, Gregory: "RE: QualysGuard"
- In reply to: wnorth: "RE: QualysGuard"
- Next in thread: Anthony Paimany: "Re: QualysGuard"
- Reply: Anthony Paimany: "Re: QualysGuard"
- Reply: dagney: "RE: QualysGuard"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: "wnorth" <wnorth@verizon.net>, "'Eric Danso'" <edanso@myblackberry.com>, <pen-test@securityfocus.com> Date: Thu, 26 Aug 2004 08:59:43 -0400
All
Nessus is great as mentioned by Wes, which brings me to this excellent
download tool call Knoppix which has everything you need for VA's,some, Pen
Test utilities and network monitoring. It runs on a bootable CD or HD
install.
Cheers
Martin
-----Original Message-----
From: wnorth [mailto:wnorth@verizon.net]
Sent: Tuesday, August 24, 2004 7:49 PM
To: 'Eric Danso'; pen-test@securityfocus.com
Subject: RE: QualysGuard
Eric,
Try nessus, it's open source, has better vulnerability detection than most
tools out there that are commercial, plus I've found that it tends to be
more accurate when it comes to vulnerabilities, though even with a scanner
the process of validation doesn't stop with printing the report. ;-)
However, if you are looking for an all around vulnerability detection
software for web, db etc. You should look at things like appscan, or shadow
security scanner, etc. There are quite a few out there, to each his own is
my stand point, what one person likes someone else hates, but it all
requires validating the findings, typically via manual methods (e.g. testing
an exploit via manual steps or running some public exploit).
-Wes
-----Original Message-----
From: Eric Danso [mailto:edanso@myblackberry.com]
Sent: Tuesday, August 24, 2004 8:50 AM
To: pen-test@securityfocus.com
Subject: QualysGuard
Has anyone on this list had a chance to use this product.
I'm interested in getting a Vulnerability scanner that is the defacto of the
Industry.
Any info would be great.
Regards,
Eric Danso
----------------------------------------------------------------------------
-- Ethical Hacking at the InfoSec Institute. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. Check out our Advanced Hacking course, learn to write exploits and attack security infrastructure. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. http://www.infosecinstitute.com/courses/ethical_hacking_training.html ---------------------------------------------------------------------------- --- ------------------------------------------------------------------------------ Ethical Hacking at the InfoSec Institute. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. Check out our Advanced Hacking course, learn to write exploits and attack security infrastructure. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. http://www.infosecinstitute.com/courses/ethical_hacking_training.html -------------------------------------------------------------------------------
- Previous message: DeGennaro, Gregory: "RE: QualysGuard"
- In reply to: wnorth: "RE: QualysGuard"
- Next in thread: Anthony Paimany: "Re: QualysGuard"
- Reply: Anthony Paimany: "Re: QualysGuard"
- Reply: dagney: "RE: QualysGuard"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
