7MS #375: Tales of Pentest Fail #3

SafePass.me is the only enterprise solution to protect organizations against credential stuffing and password spraying attacks. Visit safepass.me for more details, and tell them 7 Minute Security sent you to get a 10% discount!

I swear this program isn't turning into the Dr. Phil show, but I have to say that sharing tales of fail is extremely therapeutic for me, and based on your comments, it sounds like many of you feel the same way too.

Today's takeaways include:

• Doing a 8-10 hour internal pentest is probably overly ambitious. Seriously, it's really NOT a lot of time.
• If a client uses a logging/alerting system, vulnerability scanning is very loud to their digital ears
• Checking for DNS zone transfers is a good idea!