NetTalk Central

Author Topic: Penetration Testing  (Read 4287 times)

astahl

  • Sr. Member
  • ****
  • Posts: 308
    • View Profile
    • Email
Penetration Testing
« on: March 25, 2016, 05:20:12 AM »
Hi All,

We have a bank that wants to do a penetration test on our NetTalk website. They are checking 10 different areas and can take up 6 hrs to complete.They tried but the exe shuts down after a 1 1/2 hour test with 100 requests per minute. What could cause this or what can one set/check to resolve this issue? They think it may be a memory leak in which I have no idea if it does or could it be the thread limit?

They have a username and password so they can inspect all pages.

Using NetTalk9.06 and Clarion 10.12104


Ashley

JPMacDonald

  • Full Member
  • ***
  • Posts: 106
    • View Profile
    • Email
Re: Penetration Testing
« Reply #1 on: March 26, 2016, 05:30:40 AM »
Hi Ashley,

Unlikely to be a thread issue since 100/minute is less than 2 per second and it does run for the first 1.5 hours. Can you elaborate on what happens on each request and what backend database is being used if any?
You could open the task manager and watch to see if the memory being used by the web app continues to climb to an excessive amount during the testing, it isn't a definitive indicator of a memory leak but it may provide a valuable clue.

Regards

Parker

astahl

  • Sr. Member
  • ****
  • Posts: 308
    • View Profile
    • Email
Re: Penetration Testing
« Reply #2 on: March 28, 2016, 02:19:46 AM »
Hi Parker,

Yes the bank is kind enough to conduct a test during a period that I may monitor these things hopefully today. When I get the information I will post back here on the results.

Thanks

Ashley

Bruce

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 11244
    • View Profile
Re: Penetration Testing
« Reply #3 on: March 29, 2016, 11:22:09 PM »
you may also want to log their requests to file, so if a request does crash the server you know which one it was.

Cheers
Bruce