Re: Is there an Open Source Vulnerability Analysis Framework?

[Gareth Davies <gareth.davies () mynetsec com>]

Steve Armstrong wrote:
> So before I go through the stages of developing this framework (will be
> open source) further, I though it best to check it has not already been
> done.  I would be grateful for any pointers and urls. 
>   
You can also check out the ISSAF which also focuses on practical 
knowledge as well as a theoretical framework.

http://www.oissg.org/issaf

--
Gareth Davies - ISO 27001 LA, OPST

Manager - Security Practice

Network Security Solutions MSC Sdn. Bhd.
Suite E-07-21, Block E, Plaza Mont' Kiara, No. 2 Jalan Kiara,
Mont’ Kiara, 50480
Kuala Lumpur, Malaysia 
Phone: +603-6203 5303 or +603-6203 5920

www.mynetsec.com


-------------------------------------------------------------------------
Sponsored by: Watchfire

Cross-Site Scripting (XSS) is one of the most common application-level 
attacks that hackers use to sneak into web applications today. This 
whitepaper will discuss how traditional CSS attacks are performed, how to 
secure your site against these attacks and check if your site is protected. 
Cross-Site Scripting Explained - Download this whitepaper today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=701500000008Vmr
--------------------------------------------------------------------------