Opening the Kimono (Ways to annoy your pentester)


How often do you laugh so hard that Coke comes out your nose while reading a Security blog?

The following post just did that for me, and I wanted to share.  If you have ever been involved in a pentest, you can identify…

http://layer8.itsecuritygeek.com/index/layer8/comments/ways-to-annoy-your-pentester/

6.  Port flashing.  Randomly open and close access to ports while he’s doing his scans, so that when he comes back for a closer look later, they’ve changed.  Bonus points if you can make it look like whole hosts are appearing and disappearing.

5.  Tell him you have a whole class B to scan, even if you don’t.  Make him figure out which IPs belong to you and which ones belong to the Department of Public Safety down the street.  If he’s really good, he won’t tick off the wrong people.

4.  Change the hostname on your most critical server to “honeypot.”

3.  Have your lawyer deliver “cease and desist” letters to his house.

2.  Let him get about 1/4 of the way through his initial scan, and then shun his IP address and call him up, saying, “Game over!  I win!”

and the number one way to annoy your pentester:

1.  Accidentally add an “is” to his job title.

Comments (6)

  1. dgf says:

    US home solar power system capacity increase of 76% over last year, to 437 megawatts (MW) ,Solar Batteries
    http://www.poweroak.net the nation’s new generating capacity, more than half of which is a photovoltaic power generation. The report shows that a quarter of the US solar power capacity by 1.3 gigawatts (GW), the sixth consecutive
    quarterly increase of over 1 GW. The total annual installed capacity is expected to reach 7.9 GW, Solar Power Penerator
    http://www.poweroak.net , Solar Power Pack
    http://www.poweroak.net representing an increase of 27%.
    The report predicts that by 2016 solar power will meet the electricity needs of about 800 million households in the United States to offset 45 million metric tons of carbon emissions, equivalent to removing 10 million cars. energy storage system
    http://www.poweroak.net/energy-storage-system-c-1.html

  2. prachi says:

    Call Prachi for 24/7 sexy Mumbai escorts direct to your room in 20 minutes or less. Pink Angels of Mumbai have girls who come from a range of backgrounds and include glamour, fashion and young students. They are all beautiful, elegant, sexy, warm, fresh,
    sweet, young and stunning. http://pinkangelsofmumbai.in

    http://pinkangelsofmumbai.in/about.html
    http://pinkangelsofmumbai.in/gallery.html
    http://pinkangelsofmumbai.in/contact.html

  3. sa says:

    Doxy.in offers you the finest escort’s in Mumbai. Call 24 hrs Ms Nimita to find quality Mumbai escorts service like Airhostess, Models, College girls, Housewife, working girls, Russian and more.
    http://doxy.in

    http://doxy.in/about.html
    http://doxy.in/gallery.html
    http://doxy.in/contact.html

  4. sw says:

    Call SARA: we provide High quality Escorts service in Mumbai city. Here you will get fantastic Escorts Girls like College girls, Models, Airhostess, Housewife, Russian, Mumbai call girls and independent call girls in Mumbai for full service.
    http://daut.in
    http://daut.in/gallery.html
    http://daut.in/services.html
    http://daut.in/contact.html

  5. er says:

    Call PIYA: Mumbai Escorts. If you wish to obtain escorts in Mumbai, Piya.biz is the place for you, your source for different type of College girls, Models, Airhostess, Housewife, Russian, Mumbai call girls and independent call girls in Mumbai.
    http://piya.biz

    http://piya.biz/about.html
    http://piya.biz/gallery.html
    http://piya.biz/contact.html

  6. za says:

    Call ZUHI . We provide High quality Escorts service in Mumbai. Here you will get fantastic Escorts Girls, Service offering by our beautiful escorts models. 3/5/7 Star hotel and home 24 hrs service in all Mumbai.
    http://zuhi.biz
    http://zuhi.biz/about.html
    http://zuhi.biz/gallery.html
    http://zuhi.biz/contact.html