webapp audit and forensics

From: Serg Belokamen (serg.belokamen_at_gmail.com)
Date: 10/20/05

  • Next message: ilaiy: "Re: Tools/Software Toolkits"
    Date: Thu, 20 Oct 2005 13:01:44 +1000
    To: Andrew van der Stock <vanderaj@greebo.net>
    
    

    Hi All,

    I have been asked to perform web application security audit and
    perform intrusion analysis/forensics tasks. I am not an expert in the
    forensics field (I am very comfortable on a Linux system though) so
    any pointers would be appreciated.

    Main question however is, what would one charge (in AU$ if possible)
    for a webapplication security audit. If replying on here makes anyone
    uncomfortable feel free to email me directly. However I do need to
    know the figure asap. Also, should the client be charged if no
    vaulnarabilities are detected.

    Application in question: can't really give a lot of details on here
    but it would be something simular in size and complexity to an open
    source CMS product: Mambo.

    Any help would be appreciated.

       Thanks,
          Serg

    ------------------------------------------------------------------------------
    Audit your website security with Acunetix Web Vulnerability Scanner:

    Hackers are concentrating their efforts on attacking applications on your
    website. Up to 75% of cyber attacks are launched on shopping carts, forms,
    login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
    futile against web application hacking. Check your website for vulnerabilities
    to SQL injection, Cross site scripting and other web attacks before hackers do!
    Download Trial at:

    http://www.securityfocus.com/sponsor/pen-test_050831
    -------------------------------------------------------------------------------


  • Next message: ilaiy: "Re: Tools/Software Toolkits"

    Relevant Pages

    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • RE: Penetration test of 1 IP address
      ... Before I do anything very intrusive I personally go to the website ... Also remember once you have found a vulnerability, ... Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping ...
      (Pen-Test)
    • Re: Whitespace in passwords
      ... input password is alphanumeric + special characters -- chances are strong ... >> Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • Re: Qualys
      ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping carts, ...
      (Pen-Test)