seanhalsing

Thanks for your reply Digininja. I have actually done quite a few tests for banks over the past couple of years. Just thought it would be interesting to get other perspectives to see how they do things, especially as Im pressed for time. I suppose the term I used 'adequate assurance' is somewhat subjective. And yes, Ill probably will get someone to do the apk testing. Id be interested to hear from others. Sean

Hak5ers, I need to pick all your brains. I have a customer who has asked me to perform an internal penetration test on around 20 servers they have. I only have two weeks to complete this (including reporting) and need a list of common tests which will provide them with adequate assurance. I'm assuming its mainly a Windows based environment which includes servers such as DNS, Mail and ebanking servers. How would you go about this in a fast and efficient manner? Can you guys list the tests you would perform. Oh yes, they have also asked for their ebanking app to be tested. I've never tested such apps. Any ideas? Thanks guys Sean.