Anyone have any good external pen testing tools that you’ve used on your self hosted setup? Mine is pretty secure overall but I would like to be able to scan the WAN for vulnerabilities or misconfigurations just to make sure I haven’t missed anything.

    • Mikelius@lemmy.ml
      link
      fedilink
      English
      arrow-up
      5
      ·
      3 months ago

      Plus 1 to openvas. UI is indeed horrendous though.

      Be careful running high load tests against sensitive devices. I once ran it against a PoE switch I used for my cameras and it did something so crazy that it required me not to only power cycle the switch, but to disconnect all the cameras first and then power cycle. Was super confusing and felt like it found a way to short the device lol. Scared the hell out of me.

      That being said, I’ve found many many things to improve on my devices thanks to openvas.

      • 0xD@infosec.pub
        link
        fedilink
        English
        arrow-up
        3
        ·
        3 months ago

        I had a colleague at work years ago who did his Master’s thesis on network scanning. He ran a PoC in the company’s network and had all the printers print hundreds of pages.

        We learned that printers suck and that we should always know our payloads and targets 😁

  • Decronym@lemmy.decronym.xyzB
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    2 months ago

    Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

    Fewer Letters More Letters
    IP Internet Protocol
    PoE Power over Ethernet
    VPN Virtual Private Network

    3 acronyms in this thread; the most compressed thread commented on today has 4 acronyms.

    [Thread #694 for this sub, first seen 21st Apr 2024, 07:15] [FAQ] [Full list] [Contact] [Source code]