Author Topic: Penetration Testing  (Read 2684 times)

0 Members and 1 Guest are viewing this topic.

Offline ChuckRJr

  • Full Member
  • ***
  • Posts: 54
    • View Profile
Penetration Testing
« on: February 07, 2017, 06:35:36 PM »
I run Microsoft Security Essentials, AVAST, CCleaner, Malwarebytes and Tweaking.com to try and make sure my system is secure. I run on a TP-Link Router.
Does it make any sense for a home user to run Penetration Testing from Metasploit?
I hope it would be overkill, but in today's environment how can you be sure.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19335
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Penetration Testing
« Reply #1 on: February 07, 2017, 10:37:53 PM »
Overkill.  Plus, you really should not be running both MSE and Avast since two A/V programs can cause conflicts.  Practice safe surfing -- think before your click. 


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7197
  • Liverpool FC - YNWA
    • View Profile
Re: Penetration Testing
« Reply #2 on: February 07, 2017, 10:44:51 PM »
Is the Malwarebytes you mention running in the background or is it the on demand scanner? The new version 3 also has an anti-virus.
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19335
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Penetration Testing
« Reply #3 on: February 07, 2017, 11:12:25 PM »
From the FAQ with the release of Malwarebytes 3.0:

Quote
So, I can replace my traditional antivirus?
Yes! As I said above, over 50% of our customers already have too. We believe in layered defense and built Malwarebytes 3.0 to provide the right mix of proactive and signature-less technologies to combat modern threats and zero-day malware. The combination of our Anti-Malware, Anti-Exploit, Anti-Ransomware, Website Protection, and Remediation technologies has you better covered against modern threats than the traditional antivirus companies that charge more for less effective protection.

Can I still run Malwarebytes alongside my Symantec, McAfee, etc.?
Certainly! We built Malwarebytes 3.0 to be compatible with all major antivirus software, even Windows Defender and Microsoft Security Essentials.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline Digerati

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 1024
    • View Profile
Re: Penetration Testing
« Reply #4 on: February 08, 2017, 02:39:07 PM »
Quote
but in today's environment how can you be sure.
Can your bank be 100% sure their vault is secure? Can you be 100% sure no one will sneak past your home security alarms and double dead-bolts on all your doors?

If a professional has specifically targeted you and is determined to get in, there is little you can do. But you can easily keep the wannabe's and nosy whiz-kid neighbors out by "practicing safe computing" as Corrine suggested. That is, keep Windows fully updated, use a decent and current anti-malware solution and above all else, don't be click-happy on unsolicited downloads, links, attachments, and popups. Being behind a router is also a great idea, as long as you have changed all the default passwords and passphrases to something robust that cannot be guessed. Not your dog's name, for example.

99% of the badguys out there are lazy opportunists. So the idea is to build a secure defense so any opportunistic bad guy will be deterred and move on to easier pickings. If one of the remaining 1% is after you, that is, the professional seeking you out specifically because he/she knows for a fact, you have something they want worth spending a considerable amount of time on, then you have bigger problems.
 
I agree with Corrine and running with MSE, Avast and Malwarebytes is overkill and at best is degrading your system performance instead of offering more thorough security. At worst, as noted, it can cause conflicts (two dogs guarding the same bone, each wondering what the other is up to).

If me, I would dump Avast. I ran with MSE and MBAM for years with Windows 7. I ran with the Pro/Premium (real-time) version of MBAM on my two main systems, then the free (on-demand) version on my other systems. Then I used updated version of MSE, Windows Defender when it replaced MSE in W8 and now in W10, along MBAM. And have not had any security problems on any of my systems, including those used by my "invincible" ::) teen-aged grandkids.
Quote
I hope it would be overkill
Is that what you meant to say? Or did you leave out the context changing, "not"?

Overkill is not a good thing.


Bill (AFE7Ret)
Freedom is NOT Free!
2007 - 2018

Offline ChuckRJr

  • Full Member
  • ***
  • Posts: 54
    • View Profile
Re: Penetration Testing
« Reply #5 on: February 08, 2017, 06:19:19 PM »
Thanks to all.  I am going to remove AVAST. My system access to certain sites has slowed considerably over the last 2 weeks and AVAST seems to be controlling to much.  Starting FireFox and Cox E-Mail have slowed and COX E-Mail has become a disaster with their feedback site not existing when you try and tell them they are a disaster.
Thanks again.