Is Penetration Testing a Tester's job/task?
What are the available tools for penetration testing?
How to perform penetration testing?
Software Quality Assurance & Testing Stack Exchange is a question and answer site for software quality control experts, automation engineers, and software testers. It only takes a minute to sign up.Sign up to join this community
It is also called as- "network penetration testing" or “security testing”. It’s the process to identify security vulnerabilities in an application by evaluating the system or network with various malicious techniques. Purpose of this test is to secure important data from outsiders like hackers who can have unauthorized access to system. Once vulnerability is identified it is used to exploit system in order to gain access to sensitive information.
Causes of vulnerabilities:
Why need of Penetration testing?
Examples of Penetration testing tools:
Nmap, Nessus, Metasploit, Wireshark, OpenSSL, Cain & Abel, THC Hydra, w3af..etc
Penetration testing (also called pen testing) is the practice of testing a computer system, network or Web application to find vulnerabilities that an attacker could exploit.
Finding these vulnerabilities gives the opportunity to correct and prevent potential future occurrences.
Testers should consider security testing as part of their role. The amount of resources to devote will depend on many factors such as company size, industry, product, etc.
For tools, here is a list of 37:
The top 3 on the list are:
http://cdn.softwaretestinghelp.com/wp-content/qa/uploads/2013/11/Metasploit-pentesting-tool.jpg http://cdn.softwaretestinghelp.com/wp-content/qa/uploads/2013/11/Wireshark-logo.jpg http://cdn2.softwaretestinghelp.com/wp-content/qa/uploads/2013/11/w3af4.png
Tools for penetration testing can be classified into two kinds: scanners and attackers
You perform penetration testing (without or without the use of a tool) by issuing network queries to find vulnerabilities.