lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Thu Nov 17 19:07:10 2005
From: bugtraq at cgisecurity.net (bugtraq@...security.net)
Subject: Requesting penetration test resources

Here are some links related to web application pen testing.

SQL Injection
http://www.cgisecurity.com/development/sql.shtml

Cross Site Scripting
http://www.cgisecurity.com/development/xss.shtml

Other Specific Web Application Attacks
http://www.cgisecurity.com/pen-test/

The Web Security Threat Classification
http://www.webappsec.org/projects/threat/

The Web Security Mailing List
http://www.webappsec.org/lists/websecurity/
Web Archive: http://www.webappsec.org/lists/websecurity/archive/2005-11/

- admin@...security.com
http://www.cgisecurity.com

> 
> I would be grateful if someone could provide some providers to resources 
> where I might be able to learn the fundamentals of penetration testing 
> for network security. I have researched a lot of web sites and found a 
> couple of gems but it can be hard sorting out the wheat from the chaff 
> sometimes, especially when you're a relative novice.
> 
> Thanks.
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> 

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ