Security Technical Overview
We are web security experts and can provide you with an extensive audit of your systems:
- Penetration Testing - practical evaluation of site security from the perspective of an attacker.
- Network and System Security Auditing - theoretical evaluation of site security focused on defense.
- Source Code Auditing - checking for security problems in C, Perl, or PHP code.
- Security Policy Compliance - verifying compliance with a published Security Policy.
Strategic Profits Inc. uses a variety of open-source and proprietary tools
to scan the targeted network and identify the accessible resources that
could be exploited. Besides testing for installed software that could be
exploited, we also identify the operating systems being used on each
accessible machine and the potential exploits possible through the OS.
Some of the tools we use include:
NMAP
nmap is a utility for port scanning large networks, although it works fine
for single hosts. The guiding philosophy for the creation of nmap was
TMTOWTDI (There's More Than One Way To Do It). Sometimes you need speed,
other times you may need stealth. In some cases, bypassing firewalls may be
required. Not to mention the fact that you may want to scan different
protocols (UDP, TCP, ICMP, etc.). You just can't do all this with one
scanning mode. Thus nmap incorporats virtually every scanning technique
known.
NBTscan
NBTscan is a program for scanning IP networks for NetBIOS name information.
It sends NetBIOS status query to each address in supplied range and lists
received information in human readable form. For each responded host it
lists IP address, NetBIOS computer name, logged-in user name and MAC address.
XProbe
Xprobe is an Active OS fingerprinting tool based on Ofir Arkin's ICMP Usage
In Scanning Research project. Xprobe is an alternative to some tools which
are heavily dependent upon the usage of the TCP protocol for remote active
operating system fingerprinting.
This is especially true when trying to identify some Microsoft based
operating systems, when TCP is the protocol being used with the
fingerprinting process. Since the TCP implementation with Microsoft Windows
2000 (and Microsoft Windows XP) and Microsoft Windows ME, and with
Microsoft Windows NT 4 and Microsoft Windows 98/98SE are so close, usually
when using the TCP protocol with a remote active operating systems
fingerprinting process we are unable to differentiate between these
Microsoft based operating system groups. And this is only an example...
At no time do any of the tools we use modify the targeted systems or
"stress-test" them with Denial of Service (DoS) attacks. The scans of the
network are purely passive.
After scanning the network and evaluating its exploitability we produce a
report in ASCII text, Microsoft Word or Adobe Acrobat (PDF) format as per
the clients needs. The report details the scans performed and the
potential exploits possible. In the appendices to the document, the fixes
for each vulnerability are described in detail.
A complete dump of all of the scans performed and the information collected
is availble to the client in ASCII format. It may be compressed at the
clients request.
If you would like more information or require a quote please fill out the contact information form.
All Security Audits are quoted at $300/hour.
|
