Penetration Testing Essentials by Sean-Philip Oriyano

Author:Sean-Philip Oriyano
Language: eng
Format: epub, pdf
ISBN: 9781119235330
Publisher: Wiley
Published: 2016-11-14T00:00:00+00:00

List of Findings In the List of Findings area, all levels of findings are documented in a tabular form to provide quick information about security vulnerabilities in the targeted system. The list of findings can be divided according to the conducted test. So if the pen test targeted web applications, IT infrastructure, and mobile applications, a separate list of findings can be created for every tested environment. If a huge IT infrastructure test was conducted, then a small list of findings can be created by including only high- and medium-level vulnerabilities, and a complete list can be included in each respective section.

The Findings in Detail section features suggested recommendations on which the complete remediation will be based. This area will be read by people dealing directly with IT/information security and IT operations. So the pentester is free to write everything related to exploits in technical terms. This area includes following details: In the Definition of Vulnerability section, a base of performed exploits is established by providing detailed information about vulnerabilities. Explanations should be directly based on the environment in which the pentester has worked. The pentester can recommend an appendix and references area for gathering more information.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.