Anonymous, bureaucrat, administrator
7,528
edits
Changes
no edit summary
* Server/application fingerprint through specially crafted requests;
Analyse the authentication process in detail and will check whether it is possible for an attacker to circumvent it. Techniques used included:
* default/guessable passwords;* Brute forcing;* Authentication bypass;* Directory traversal;* Exploitation of 'remember password' features;* Reviewing Session Management (login/logout);* Management of Browser cache.
=Toolset = In order to perform these tests, specialised tools are required. There are many choices in this area and many different providers who can supply solutions. If a collective term for breaking into a system is Penetration Testing (pentest) as defined in http://en.wikipedia.org/wiki/Penetration_test then a combination of tools is required. There are independent testing / solution providers:* Qualys : Qualys Express Lite, Express, Enterprise ; https://www.qualys.com/* Tenable : Nessus ; http://www.tenable.com/* Rapid7 : Nexpose ; http://www.rapid7.com/products/nexpose/* Tripwire : Tripwire ; http://www.tripwire.com/ Tools themselves include* Qualys : https://www.qualys.com/qualysguard-subscription-plans/* Nexpose : http://www.rapid7.com/products/nexpose/* Metaspoilt : http://www.rapid7.com/products/metasploit/* Wireshark : https://www.wireshark.org/* Meterpreter: http://www.offensive-security.com/metasploit-unleashed/Meterpreter_Basics* Burp : http://portswigger.net/burp/* OpenVAS : http://www.openvas.org/ Getting the tools can be most usefully obtained through testing suites* Kali : https://www.kali.org/* Qualys : https://www.qualys.com/ Each of these tools and tool sets operate under a number of general headings.* Exploitation Tools* Forensics Tools* Hardware Hacking* Information Gathering* Maintaining Access* Password Attacks* Reporting Tools* Reverse Engineering* Sniffing & Spoofing* Stress Testing* Vulnerability Analysis* Web Applications* Wireless Attacks All n One use the Kali Toolset as the basis for all security testing http://tools.kali.org/tools-listing The Kali toolset provides a number of tools under each of the headings above. Infosys.com provide a useful commentary on SaaS testing.http://www.infosys.com/IT-services/independent-validation-testing-services/white-papers/Documents/saas-testing.pdf Their three primary grouping areas for testing are* Application* Network* Infrastructure With these headings in mind, we can roughly group the testing * General** Information Gathering** Reporting Tools * Application** Password Attacks** Maintaining Access** Reverse Engineering** Stress Testing** Vulnerability Analysis** Web Applications * Network** Password Attacks** Maintaining Access** Sniffing & Spoofing** Stress Testing** Vulnerability Analysis * Infrastructure** Password Attacks** Exploitation Tools** Forensics Tools** Hardware Hacking** Maintaining Access** Stress Testing** Vulnerability Analysis** Wireless Attacks Combined with these we must include processes and procedures for how security testing is also addressed. For this reason the ENISA framework is also used as a benchmark for ensuring general operational processes and procedures are in place to cover security. The output of these tests are performed on a four weekly iterative cycle and prepared as an internal report. For tracking and addressing of identified security issues, these are managed through the Contact, Content, Frameworks, Infrastructure and Security departments work queue ticketing system which All n One employ. = Security Audits of bxp software ==
All n One's testing is security audit driven as we have found this provides more objective measurable goals.