Planning and Scooping

Question 1

• An open-source framework for developing REST services
• REST is a lightweight API
• The document can provide internal info on REST services exposed to clients

Answer 1

Swagger document

Question 2

• A set of standards used to define the content of an XML document
• If an attacker knows the schema, they can replace some data to cause an exploit

Answer 2

XSD (XML Schema Definition)

Question 3

• Companies want to encourage developers to create applications for their platforms.
• Doc provides info on tools (i.e., libraries, processes, code samples, etc.) used to develop software for a specific device or OS

Answer 3

SDK (Software Development Kit) documentation

Question 4

• XML-based machine-readable description of HTTP-based web services.
• Typically used with REST services
• Can be publicly available
• Developers put these files out there so the client can see how to use a particular service. As a pentester, this is very useful for determining services being used and the parameters they expect

Answer 4

Web Application Description Language (WADL) documentation

Question 5

• XML-based machine-readable description of HTTP-based web services.
• Typically used with SOAP services
• Can be publicly available
• Developers put these files out there so the client can see how to use a particular service. As a pentester, this is very useful for determining services being used and the parameters they expect

Answer 5

Web Services Description Language (WSDL) documentation

Question 6

• This is the business agreement between the pentesting company and the client
• Here all business details are specified
• How the billing process is going to work
• How any potential legal conflicts will be resolved (i.e. what state jurisdictions will be used)

Answer 6

Master Service Agreement (MSA)

Question 7

• Here we define the work tasks we are going to accomplish for the client (what’s in scope)
• Typically, this document is a part of the MSA

Answer 7

Statement of Work (SOW)

Question 8

• During the assessment, we the pen tester will probably be exposed to confidential or proprietary company info
• This agreement defines restrictions as to what info can be shared publicly
• It can also be bi-lateral

Answer 8

Non-Disclosure Agreement (NDA)

Question 9

• Limits are put into place to control the pen tester’s activities.
• This prevents the tester from having free reign in the environment.
• Defines what targets are on and off-limits
• Also defines the window of time we the pen tester are allowed to attack certain resources

Answer 9

Rules of engagement