The World's Worst Penetration Test Report by #ScumbagPenTester

Re:The World's Worst Penetration Test Report by #ScumbagPenT... by _delirium on Wednesday January 29, 2014 @11:17AM (#7144737)

If this is a baseline for "very bad" penetration testing, it makes me think I could start up an "almost competent" low-end penetration-testing business just by blindly following a checklist found on the internet, as long as I used a checklist for the right operating system and proof-read the final report.

[ Parent | on HN ]

Re:The World's Worst Penetration Test Report by #ScumbagPenT... by wikwocket on Wednesday January 29, 2014 @12:43PM (#7145418)

There are many, many niches where you could do well by downloading free software from the internet, reading free literature/guides/checklists from the internet, applying a tiny amount of common sense and competency, and then offering related services in exchange for money.

That so many companies manage to screw this up so badly, and still stay in business, indicates that all you need to succeed is some business acumen, the basest level of technical competency, and a little luck! :)

[ Parent | on HN ]

Re:The World's Worst Penetration Test Report by #ScumbagPenT... by pavel_lishin on Wednesday January 29, 2014 @11:36AM (#7144915)

The "we're fast, we're cheap, and sometimes we're right" approach to marketing?

[ Parent | on HN ]

Re:The World's Worst Penetration Test Report by #ScumbagPenT... by tptacek on Wednesday January 29, 2014 @12:16PM (#7145214)

For network testing, yes, you absolutely could do that.

[ Parent | on HN ]