3 ms·
I get the idea that most pen testers are entry-level and spend their time doing standard scanning and looking for standardized types of vulnerabilities using pr
by ufmace 9y ago
I get the idea that most pen testers are entry-level and spend their time doing standard scanning and looking for standardized types of vulnerabilities using pre-built tools and techniques. The ones who can build those tools and come up with novel attacks against well-protected targets are the top of the heap.
What is probably scary is just how many commercial sites can be compromised by those standard well-known techniques.
- crowbahr 9y agoEquifax Argentina (or was it all south America?) was compromised from the admin password "password". People are incredibly oblivious to how easy they are to break and how tempting a target they are.
- commandlinefan 9y ago'We used to quip that “password” is the most common password. Now it’s “password1.” Who said users haven’t learned anything about security?' -- Bruce Schneier
- commandlinefan 9y ago> most pen testers are entry-level ... What is probably scary is just how many commercial sites can be compromised by those standard well-known techniques. ... and the thought that there's an army of underpaid, underappreciated folks who spend all day every day honing the craft to perfection.