-1

Is Penetration Testing a Tester's job/task?

What are the available tools for penetration testing?

How to perform penetration testing?

4
+50

It is also called as- "network penetration testing" or “security testing”. It’s the process to identify security vulnerabilities in an application by evaluating the system or network with various malicious techniques. Purpose of this test is to secure important data from outsiders like hackers who can have unauthorized access to system. Once vulnerability is identified it is used to exploit system in order to gain access to sensitive information.

Causes of vulnerabilities:

  1. Design and development errors
  2. Poor system configuration
  3. Human errors

Why need of Penetration testing?

  1. Financial data must be secured while transferring between different systems
  2. Many clients are asking for pen testing as part of the software release cycle
  3. To secure user data
  4. To find security vulnerabilities in an application

Examples of Penetration testing tools:

Nmap, Nessus, Metasploit, Wireshark, OpenSSL, Cain & Abel, THC Hydra, w3af..etc

2

Penetration testing (also called pen testing) is the practice of testing a computer system, network or Web application to find vulnerabilities that an attacker could exploit. Finding these vulnerabilities gives the opportunity to correct and prevent potential future occurrences.
Testers should consider security testing as part of their role. The amount of resources to devote will depend on many factors such as company size, industry, product, etc.

For tools, here is a list of 37:
http://www.softwaretestinghelp.com/penetration-testing-tools/
The top 3 on the list are:
http://cdn.softwaretestinghelp.com/wp-content/qa/uploads/2013/11/Metasploit-pentesting-tool.jpg http://cdn.softwaretestinghelp.com/wp-content/qa/uploads/2013/11/Wireshark-logo.jpg http://cdn2.softwaretestinghelp.com/wp-content/qa/uploads/2013/11/w3af4.png

Tools for penetration testing can be classified into two kinds: scanners and attackers

You perform penetration testing (without or without the use of a tool) by issuing network queries to find vulnerabilities.

  • what you mean is.. we have to think like an hacker right? – Paarthiban NK Apr 5 '16 at 13:22
  • 1
    Its actually more difficult because you have constraints on what you are allowed to do. – David Cain Apr 5 '16 at 17:29
  • @PaarthibanNK - no, you need to think like a cracker. :-) Hacking is something different, learn your terminology because you are talking to programmers, not clueless public (which uses "hacking" to describe cracking). en.wikipedia.org/wiki/Hacker_%28expert%29 – Peter M. Apr 11 '16 at 14:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.