Post Pen Test Hack Question

[hayabusa]

It's also interesting when the client provides documentation, but things like the network diagrams are out-of-date and inaccurate. It's like starting with negative information; starting from scratch would put you ahead in those situations

...aaaannnnnddddd that's EXACTLY why I prefer Blackbox to Whitebox tests, any day.  I'd rather figure it out for myself (since over 50% of the time I have to, anyway,) and have a little more say in things.

Obviously, there are the times where they limit your scope, so you kind of HAVE to deal with their information, but...

[camelCase]

"On the flip side of this, the reality is, if someone compromised a glaring vulnerability, chances are the tester sucked (for lack of better words). Sorry I call it how I see it. In an instance where this occurs (you do a test and leave gaping holes) kiss any future business goodbye as well as introducing a huge black eye on your company."

you never worked where aj and I have... LOL Had black eyes and missing teeth but still got a lot of business.