Open VPN for PEN testing

Todd

Hi All,

I have heard several folks say that they use Open VPN for human penetration testing.
Refernce: https://www.pcisecuritystandards.org/pdfs/infosupp_11_3_penetration_testing.pdf

I apparently did not pay close enough attention. I figured that Open VPN would get you past the firewall and the multilayer switch. Which sounded right to me. But, if I remember correctly, they also used Open VPN to try to break into ports. Can someone point me to a reference as to what Open VPN is used for in human penetration testing?

Many thanks,
-T

Todd

Hi All,

One of our intrepid heroes over on security-basics@securityfocus.com answered this question for me: Open VPN is only used for establishing a connection. Other tools are used to do the actual testing.

-T