Penetration Tests

taschenmesserCompass Security AG has specialized in the latest hacking methods and attacks. At the same time we go far beyond the capabilities of a vulnerability scanner - work on various levels and penetrate through viruses, Trojans, tunnels or web attacks, supported by social engineering methods.

Especially the attack with tunnelling methods is a powerful tool for hackers to control a compromised system over a long period of time. We know the methods and have developed a proof-of-concept for tunnels in a research project.

During penetration testing there is always the question against WHOM you want to protect yourself. Should the protection be effective against script kiddies or advanced hackers? Are hacking activities registered at all? Does the alerting of the monitoring team work?

The penetration test is usually repeated periodically to make differences and developments of the IT security measurable. Previously identified vulnerabilities are audited again and checked if the implemented counter measures are effective.

pdf

  Compass Security Services (v1.3)

News

HTML5 Web Security
12/7/11 - HTML5 Security Research Report

Review BlackHat / Defcon 2011
11/8/11 - This year, as every year, two security analysts of Compass Security AG participated in the BlackHat and Defcon in Las Vegas.

Oracle RDC Onsite XSS Vulnerability
10/18/11 - Compass Security has found a vulnerability in ORACLE RDC ONSITE.

Course Schedule - New iPhone & iPad Hands-On course
10/6/11 - The new iPhone & iPad Compass course will be held in Switzerland for the first time

it-sa 2011: Compass Live-Hacking at IT-SA 2011 in Nürnberg
9/29/11 - Meet Compass at IT-SA Messestand in Halle 12, Stand 226. We will present Live-Hackign with newest iPhone and Mobile Devices.