![]() |
||||
for those about to rock, we salute you: AKA :
erimin Chat :
Links: Archives
|
Wednesday, December 19, 2007
Pen-Test It’s raining and gloomy out there. I’m feeling pretty jaded right about now. I've been working for like what, errmm... 8 years? yah somewhere there. I personally think the most memorable job would be as a penetration tester. I’m sure a lot of you have not heard about penetration tester. Some of them call themselves pen-tester, some Tiger, some white-hat hacker, whatever. I used to work for this UK company as Penetration Tester ( also known as Hacker ). Our customers are all English companies and our job is to hack in to their system / servers / etc , write a report on how we got in, propose solutions / recommendations to enhance customer's security, play Warcraft, sleep and drink lotsa coffees. Penetration testers and used car salesmen have virtually nothing in common - except that both may end up giving you something other than what you expected. When people asked about my profession, I would politely answer them "I am doing penetration testing" and they would go "huh?! wtf? u "penetrate" girls everyday ah?". So the next time if someone tells you "hey im doing pen-test" or "im a penetration tester", he / she is not a pornstar or involves in the porn industry in any way. Here's what Mr. Wiki has to say : Penetration test _____________ From Wikipedia, the free encyclopedia A penetration test is a method of evaluating the security of a computer system or network by simulating an attack by a malicious user, known as a cracker (though often incorrectly referred to as a hacker). The process involves an active analysis of the system for any potential vulnerabilities that may result from poor or improper system configuration, known and/or unknown hardware or software flaws, or operational weaknesses in process or technical countermeasures. This analysis is carried out from the position of a potential attacker, and can involve active exploitation of security vulnerabilities. Any security issues that are found will be presented to the system owner together with an assessment of their impact and often with a proposal for mitigation or a technical solution. The intent of a penetration test is to determine feasibility of an attack and the amount of business impact of a successful exploit, if discovered. I am no longer working as a professional pen-tester and currently selling eggs at market. Amen. [3:53 AM] |
|||