The SmartCash dev team have hired Linux Force Security white hat hacking team to conduct security audit on SmartCash web wallet. And Linux Force Security pentester concluded that SmartCash web wallet is indeed secure.
What is Pentester?
Pentester is a group of professional hacker aimed to work with information security auditing, also known as certified ethical hacker.What is the possible test they're conduct?
Since I have no information what exact test they done, as a Linux guy, in my opinion they conducted the following test.Conducted the reconnaissance. This phase include footprinting, scanning and enumerating, a process of gathering information about the target network.
Conducted a Social engineering, this is one of the most exciting part in pentesting where the team need to meet SmartCash staff, dev team, members, and all possible person connected in SmartCash community. They usually conduct it to gather even more information.
Conducted active, passive and stealth scans. It is similar to the process of reconnaissance but these is for real. In this phase attacker will scan the network with the TCP connect protocol, also known as port scanning. (tools: nmap)
Session hijacking, it's a process of gaining unauthorized access to information or services in a computer system.
DOS and DDOS attack, both attack is aimed to flood the targeted resources. DOS uses single machine to attack the target, they call it ping of death while DDOS uses multiple machine for an attack.
Detecting Honeypots and Honeynet.
Looking for vulnerabilities in web applications.
Using exploits and Botnet's.
Common pentesting tools:
Nmap, Brute Force, THC-Hydra, BruteSSH2, John The Ripper, Netcat, keyloggers, worms, rootkits, backdoor, Metasploit, Ettercap, Wireshark, Maltego, and Botnet's. Usually beginner uses Kali Linux.
And if you want to learn more amazing things about SmartCash, kindly visit link below;
Website:
https://smartcash.cc/
Official Wallet :
https://smartcash.cc/wallets/
SmartRewards Guide :
https://forum.smartcash.cc/t/smartrewards-guide/125
Mining Pool :
http://pool.smartcash.cc/
Mining Guide :
https://steemit.com/smartcash/@hockleyj/smartcash-mining-on-pool-a-visual-guide-on-how-to-set-it-up
Discord Channel:
https://discordapp.com/invite/BDUh8jr
