- Virtualization in software development and QA
- Marcelo Picorelli
- VMworld `06
- Date published
- ITeSu, virtual machines, penetration testing
In this talk, we present an automated framework for testing exploits comprising a farm of victim virtual machines hosted in VMware servers, the Core Impact penetration testing framework and a synchronization and reporting module. We describe the use of vm images to address the need to test a large number of systems daily, using low-end hardware. Discussion also includes how to take advantage of sparse resources, homegrown tools and the migration to a newer GSX Server to improve testing time and coverage.