Security/Penetration Testing
Discussion
Hi All,
I'm starting a compnay to do the above. I also have a day job (also in the IT security arena) so will be doing it of an evening and weekends to get it off the ground.
Onto the point, if anyone is interested in some free penetration testing, please get in contact with me and we will sort the paperwork out. I am government SC cleared, and am currently studying for professional qualifications for Computer Forensics and Ethical Hacking.
If anyone would require any further information, please do not hesitate to contact me.
Ian
I'm starting a compnay to do the above. I also have a day job (also in the IT security arena) so will be doing it of an evening and weekends to get it off the ground.
Onto the point, if anyone is interested in some free penetration testing, please get in contact with me and we will sort the paperwork out. I am government SC cleared, and am currently studying for professional qualifications for Computer Forensics and Ethical Hacking.
If anyone would require any further information, please do not hesitate to contact me.
Ian
aldi said:
Do you mind if I ask, how for do you take these things? Do you look at a companies internet facing vulnerabilities, or going as far as individual PC/server audits, ringing up and blagging people... where does it end? Just curious
You take them as far they want to go. You need a paper document from the directors giving you permission to carry out attacks - some companies might want you to carry out social engineering attcks against their staff, others not. Some might want you to undertake physical security testing as well - whatever the client wants, you must do - and no further. You have a get out of jail card (the contract) providing you do what they ask you to. Any further, and you run the risk of being arrested. It's not worth it.
fidgits said:
I do a lot of work in this area, and the key concerns i am hearing from customers is internal security
Given that a significant number of exploits are originated by employees, this is no suprise.
fidgits said:
(most modern IDS firewalls take care of the external to a reasonable level)...
W-e-e-e-e-e-e-lllll ....
I presume zumbruk already does this, but obviously can't answer for him. Currently, I don't do any, but am looking to get clients - one of those things! Word of mouth etc, first gig is the hardest. I've got a couple of inroads, one friend is a director of a company that resells computer services, another is a fairly highly placed Oracle developer in a smallish co and a few other lines of enquiry. It's just a matter of persuading them, and their bosses! After all if you do a crap job on their recommendation, then they get the bad rep! It's a classic Catch22 for me....
zumbruk said:
I do a lot of work in this area, and the key concerns i am hearing from customers is internal security
Given that a significant number of exploits are originated by employees, this is no suprise.
fidgits said:
(most modern IDS firewalls take care of the external to a reasonable level)...
W-e-e-e-e-e-e-lllll ....
from the meetings i've had - more money is lost due to internal infections/breaches of security, usually brought in by remote/roaming laptops than external attacks.
Tonsko said:
I presume zumbruk already does this, but obviously can't answer for him. Currently, I don't do any, but am looking to get clients - one of those things! Word of mouth etc, first gig is the hardest. I've got a couple of inroads, one friend is a director of a company that resells computer services, another is a fairly highly placed Oracle developer in a smallish co and a few other lines of enquiry. It's just a matter of persuading them, and their bosses! After all if you do a crap job on their recommendation, then they get the bad rep! It's a classic Catch22 for me....
I'l bear you in mind if any of our clients need you!
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff