7MS #375: Tales of Pentest Fail #3 - a podcast by Brian Johnson

I swear this program isn't turning into the Dr. Phil show, but I have to say that sharing tales of fail is extremely therapeutic for me, and based on your comments, it sounds like many of you feel the same way too.

Today's takeaways include:

• Doing a 8-10 hour internal pentest is probably overly ambitious. Seriously, it's really NOT a lot of time.
• If a client uses a logging/alerting system, vulnerability scanning is very loud to their digital ears
• Checking for DNS zone transfers is a good idea!

Further episodes of 7 Minute Security

Further podcasts by Brian Johnson

Website of Brian Johnson