RE: Know such a web's server tool? -- huh

> -----Original Message-----
> From: Alvin Oga [mailto:alvin.sec@Mail.Linux-Consulting.com]
> Sent: Sunday, 20 July 2003 5:59 p.m.
> To: Paul Vet
> Cc: MARTIN M. Bénoni; pen-test@securityfocus.com
> Subject: RE: Know such a web's server tool? -- huh
>
> okay.... i'll bite ... why does everybody/somebody think that "pen-test"

Exactly this is the reason why penetration testing isn't only running of nmap/nessus/iss/whatever, but more important - interpretation of results and additional steps taken.

Everyone can run tools, but only people who understand things can interpret their results and find additional possible or existing security problems.

Regards,

Bojan Zdrnja