3 votes

Tools used in penetration testing

Below are some of the penetration tools used in security testing services: Wireshark This is basically a network protocol analyzer –popular for providing the minutest details about your network ...
Sumit Kumar's user avatar
2 votes
Accepted

Tools used in penetration testing

You can install Kali Linux. It has a massive amount of tools that you can use to perform penetration testing with. It may take a day or so to download and install. Kali Linux OS link
Yu Zhang's user avatar
  • 9,952
2 votes

Which penetration test tools can be used in the agile and CI environment?

SonarQube: Plus side: OpenSource Integratable into CI Security hotsposts support Java (Swing), JS, VB, C#, Python, PHP OWASP / SANS Security Reports Down side: Not a real penetration tester, but ...
Prome's user avatar
  • 1,014
2 votes
Accepted

How can someone prevent to become a victim of social engineering?

Continuous education is the key. Implement a strict security policy as well. Social engineering threat originates from both internal employees and external strangers. For Internal Employees: In ...
Yu Zhang's user avatar
  • 9,952
1 vote

Penetration test in a staging environment. When and how much?

I'm more in favor of static code analyzers (e.g. Sonarqube) which also inspect code for some common OWASP issues once per sprint.
Prome's user avatar
  • 1,014
1 vote

Vulnerability scanner with different scan profiles

SonarQube also checks for security vulnerabilities (check beforehand if your application language is supported), see https://www.sonarqube.org/features/security/ . You can define different rule-sets ...
Prome's user avatar
  • 1,014
1 vote
Accepted

How to plan penetration testing in agile development?

A lot of penetration testing I've seen has been black-box testing. In Agile teams, a lot of black-box testing moves to white-box testing. The nice thing about this is that white-box penetration ...
Daniel's user avatar
  • 738

Only top scored, non community-wiki answers of a minimum length are eligible