Solved

Black Box penetration testing software

Posted on 2014-04-24
7
428 Views
Last Modified: 2014-04-24
I need a good penetration testing software for our web servers. Preferably one that is inexpensive.  Most I have been able to find are nearly $10,000 or more. That cost would be prohibitive.
0
Comment
Question by:jimmylew52
  • 2
  • 2
  • 2
  • +1
7 Comments
 
LVL 34

Expert Comment

by:Dan Craciun
ID: 40020561
It's usually cheaper to hire a company specialized in security testing/audit.

HTH,
Dan
0
 
LVL 1

Author Comment

by:jimmylew52
ID: 40020594
Any suggestions on a company? The ones I have talked to want  $10,000 plus to perform a scan and want to set up to repetitively scan. We need quarterly scans and third party is not required.
0
 
LVL 5

Accepted Solution

by:
Pasha Kravtsov earned 334 total points
ID: 40020650
Have you tried metasploit or acunitex? I don't think they're that expensive.
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 33

Assisted Solution

by:Dave Howe
Dave Howe earned 166 total points
ID: 40020679
The problem isn't the software. 99% of website pentesting software out there is free or at least has a free trial version.

The problem is gaining the skills to use it - if you want software you can just point at a site and get the same class of answer you would get from an experienced pentester, you are in for a very long wait; even the best and most expensive software needs to be configured to perform the appropriate fuzzing and SQLi attacks.
0
 
LVL 5

Assisted Solution

by:Pasha Kravtsov
Pasha Kravtsov earned 334 total points
ID: 40020689
I agree with Dave, if you want a truly accurate pentest on your website/network you're going to want to hire a firm that specializes in it. Some tools and automation can miss things only an experienced tester can see.
0
 
LVL 33

Expert Comment

by:Dave Howe
ID: 40020718
Or if you are on a budget but have the time - learn those skills. Everything you need is on the internet for free, you just have to be willing to put in the hours to learn it.
0
 
LVL 1

Author Closing Comment

by:jimmylew52
ID: 40021041
Thanks, it looks like acunetix is going to be the solution for us.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Encryption for Business Encryption (https://en.wikipedia.org/wiki/Encryption) ensures the safety of our data when sending emails. In most cases, to read an encrypted email you must enter a secret key that will enable you to decrypt the email. T…
Three simple tips to quickly and efficiently back up and protect the contents of your PC and Mac®.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
A simple description of email encryption using a secure portal service. This is one of the choices offered by The Email Laundry for email encryption. The other choices are pdf encryption which creates an encrypted pdf of your email and any attachmen…

912 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now