Re: Application Assessment

[bugtraq () cgisecurity net]

> > anybody have experience with application assessment ? I am a  
> > network guy, dont know much about the apps PT.
> > 1. is there any tools that allow me to do the assessment throughly ?


Check out the Burp Suite v1.0 (http://portswigger.net/suite/) which was just released. 


> If you're talking web-applications, check out www.owasp.org for a  
> wealth of information on the subject.  You may also want to take a  
> look at the webappsec mailing list at www.securityfocus.com.


The Web Application Security Consortium also has some documentation
under http://www.webappsec.org/projects/ that may help you out. You may also want to check out
'The Web Security Mailing List' (http://www.webappsec.org/lists/websecurity/ )

 - zeno
http://www.cgisecurity.com (Web Application Security News, and more)