Try OSSTMM methodology (www.osstmm.org). It enumerates checks and tests to perform. This could be a good start. Otherwise, imagination is the real weapon for a security pentester. Security-Database Team. > Does anyone have a good pentesting checklist they would recommend? > Something to help me get organized, and away from using random attack > vectors and the kitchen sink approach. Thanks. > > > ------------------------------------------------------------------------ > This List Sponsored by: Cenzic > > Need to secure your web apps? > Cenzic Hailstorm finds vulnerabilities fast. > Click the link to buy it, try it or download Hailstorm for FREE. > > http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------ This List Sponsored by: Cenzic Need to secure your web apps? Cenzic Hailstorm finds vulnerabilities fast. Click the link to buy it, try it or download Hailstorm for FREE. http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW ------------------------------------------------------------------------ |
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | RE: Pen Testing Company and Legal Documentation, Levenglick, Jeff |
|---|---|
| Next by Date: | OSSTMM talk at FOSDEM, Pete Herzog |
| Previous by Thread: | RE: Good Pentesting checklist, Jordan, Jason |
| Next by Thread: | Re: Good Pentesting checklist, crazy frog crazy frog |
| Indexes: | [Date] [Thread] [Top] [All Lists] |