Incident Report

[rwxrwx]

Hello gentlemen,

After a successful penetration testing assessment into a company network, taking the sensitive data and leaving a note to the IT Admins and Management about the incident, while negotiating for a price, should we give a incident report to the company saying how we hacked them and a solution to patch vulnerabilities?

 

[Kombinathon]

Are you concerned about the company security? Perhaps you should create a legal business to do that.

 

[Alpano]

should we give a incident report to the company saying how we hacked them and a solution to patch vulnerabilities?

If you are a white hat pentester, you should definitely write everything down from start to finish. Vulnerability type, CVE number, time of compromise, infected hosts on the network, and so on down the list.
If you are a black hat, you should definitely not talk about it, even after the ransom is paid.

 

[Kombinathon]

If you are a white hat pentester, you should definitely write everything down from start to finish. Vulnerability type, CVE number, time of compromise, infected hosts on the network, and so on down the list.
If you are a black hat, you should definitely not talk about it, even after the ransom is paid.

Exactly what I meant. If you are concerned about all those things you are probably working as a white hat and should create a company for that. Otherwise forget it.

 

[cynonimax]

If you are a white as the mates told, the question is, do you have any contract signed with the company? Or you vulnerated his network to try gain the client?

- If is the first question, in my opinion you should negotiate the price first. But if you are ensure that the company will pay with good price, you should to create the report the most detailed as possible.

- If is the second question, in my opinion, absolutely no, you wont do a work without ensure that you will receive any revenue for it and maybe you can get a revenue for other side, you know

 

[cherabeliy]

Согласен, все зависит если black или white. Логично сделать репорт если white