Penetration Testing mailing list archives

Re: Penetration Testing


From: Pranay Kanwar <warl0ck () metaeye org>
Date: Wed, 02 May 2007 12:48:56 +0530

Hi Farukh,

I suggest you start with a methodology the two listed below are
good.

1. OSSTMM - http://www.isecom.org/osstmm/.
2. ISSAF  - http://www.oissg.org/content/view/71/71/

Also take a look at the Security Technical Implementation Guides
http://iase.disa.mil/stigs/stig/index.html, in addition to
Security Configuration Guides
http://www.nsa.gov/snac/index.cfm?MenuID=scg10.3.1.

For the Tools see the http://sectools.org and
http://vulnerabilityassessment.co.uk/Penetration%20Test.html

Regards

warl0ck // MSG
http://www.metaeye.org

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


Current thread: