full-disclosure - [WEB SECURITY] # How To Start

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 14 Feb 2010 12:23:12 +0530
From: vivek saxena <che.cissp@...il.com>
To: Hafez Kamal <aphesz@...kinthebox.org>
Cc: phishing@...urityfocus.com, mysql-plain-digest@...ts.mysql.com,
	scadasec@...s.infracritical.com, focus-apple@...urityfocus.com,
	forensics@...urityfocus.com, email@...r.org.uk,
	Majordomo@...cert.gov, html-list@...uriteam.com,
	snort-devel@...ts.sourceforge.net, funsec@...uxbox.org,
	bugtraq@...urityfocus.com, wireshark-users@...eshark.org,
	pgsql-hacker@...tgresql.org, incidents@...urityfocus.com,
	webappsec@...urityfocus.com, pen-test@...urityfocus.com,
	websecurity@...appsec.org, security-announce@...ts.apple.com,
	nepcert-list@...cert.org.np, wifisec@...urityfocus.com,
	dev-security@...ts.mozilla.org,
	security-basics@...urityfocus.com, loganalysis@...urityfocus.com,
	firewalls@...urityfocus.com, nsp-security@...k.nether.net,
	dev-tech-crypto@...ts.mozilla.org, psrc@...urityfocus.com,
	web-qa@...drivalinux.org, debian-security@...t.debian.org,
	dev-platforms-mobile@...ts.mozilla.org,
	securityjobs-discussion@...urityfocus.com, framework@...ol.metasploit.com,
	rkhunter-users@...ts.sourceforge.net, oss-security@...ts.openwall.com,
	binaryanalysis@...urityfocus.com,
	linux-secnews@...urityfocus.com, crypto@...urityfocus.com,
	honeypots@...urityfocus.com, kernel-discuss@...drivalinux.org,
	dailydave@...ts.immunitysec.org, focus-virus@...urityfocus.com,
	focus-ids@...urityfocus.com, full-disclosure@...ts.grok.org.uk,
	realcases@...urityfocus.com, snort-users@...ts.sourceforge.net,
	gentoo-security@...ts.gentoo.org, isn@...osecnews.org
Subject: [WEB SECURITY] # How To Start

Hi All,



i am new to Penetration testing and Security testing/ i know the theoretical
knowledge of Penetration testing but @syntax (injection) i need to improve
..

Just wanted to know how to proceed with it.

There is one question that i would like to ask that how to find out
Vulnerability in DAO Pattern.

And How to Test HTTPS and SSL based application.



-Vivek

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/