Patent ID: 8365289
Filing Date: 2013-01-29
Classification: G06F,H04L

Abstract:
1. A method for performing penetration testing in a network from an end-user computer, wherein the method comprises the steps of: gathering valid email addresses from a server; transmitting at least one determination email, wherein the determination email contains computer code, to at least one of the gathered email addresses, wherein the determination email is transmitted to a target computer associated with the at least one gathered email address, and wherein the determination email determines at least one application running on the target computer using the computer code of the determination email; determining, by use of the determination email, at least one application running on the target computer, by the determination email containing a placeholder for content hosted in a server controlled by the penetration tester, wherein the at least one application is used to load the content in the placeholder in the target computer, thereby identifying the at least one application; determining at least one vulnerability of the at least one determined application running on the target computer; and generating at least one exploit for exploiting the determined at least one vulnerability of the application, thereby allowing for compromising of the target computer.