Re: Is there an Open Source Vulnerability Analysis Framework?

From: Gareth Davies <gareth.davies@xxxxxxxxxxxx>
Date: Mon, 17 Jul 2006 16:12:28 +0800

Steve Armstrong wrote:

So before I go through the stages of developing this framework (will be
open source) further, I though it best to check it has not already been
done. I would be grateful for any pointers and urls.

You can also check out the ISSAF which also focuses on practical knowledge as well as a theoretical framework.

http://www.oissg.org/issaf

--
Gareth Davies - ISO 27001 LA, OPST

Manager - Security Practice

Network Security Solutions MSC Sdn. Bhd.
Suite E-07-21, Block E, Plaza Mont' Kiara, No. 2 Jalan Kiara,
Mont’ Kiara, 50480
Kuala Lumpur, Malaysia Phone: +603-6203 5303 or +603-6203 5920

www.mynetsec.com

------------------------------------------------------------------------------
This List Sponsored by: Cenzic

Concerned about Web Application Security? Why not go with the #1 solution - Cenzic, the only one to win the Analyst's Choice Award from eWeek. As attacks through web applications continue to rise, you need to proactively protect your applications from hackers. Cenzic has the most comprehensive solutions to meet your application security penetration testing and vulnerability management needs. You have an option to go with a managed service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm). Download FREE whitepaper on how a managed service can help you: http://www.cenzic.com/news_events/wpappsec.php And, now for a limited time we can do a FREE audit for you to confirm your results from other product. Contact us at request@xxxxxxxxxx for details.
------------------------------------------------------------------------------

References:
- Is there an Open Source Vulnerability Analysis Framework?
  - From: Steve Armstrong

Prev by Date: Re: wonder what tools or test was used
Next by Date: Re: the best pen-testing live linux distro????
Previous by thread: Re: Is there an Open Source Vulnerability Analysis Framework?
Next by thread: WG: nikto, n-stealth can crash the web-server?
Index(es):
- Date
- Thread

Relevant Pages

Re: Will the real hacker please stand up and raise their hand
... security concepts, but cannot run a sniffer to save their life, ... Subject: Hackers and Employment ... managed service or an enterprise software ... Download FREE whitepaper on how a managed ...
(Pen-Test)
RE: CISSP-ISSMP
... Luckily the school also teaches Security++, and he's good with XP so he switches to that instead, and uses a cheat sheet to pass. ... it's normal to see a test king poking out from the study guide of a lot of students in certification classes. ... Download FREE whitepaper on how a managed service ...
(Pen-Test)
RE: Walmart using WEP
... Subject: Walmart using WEP ... Concerned about Web Application Security? ... Download FREE whitepaper on how a managed service ...
(Pen-Test)
Re: privelege escalation with .bat files
... >Concerned about Web Application Security? ... As attacks through web applications continue to ... Download FREE whitepaper on how a managed service can ...
(Pen-Test)
Re: What is being a pen tester really like?
... > Subject: RE: What is being a pen tester really like? ... >>> a career in security and pen testing. ... >> managed service or an enterprise software ... Download FREE whitepaper on how a managed service ...
(Pen-Test)