Joel,
Security assessment tools and the details of specific assessment techniques
is already covered in ISSAF; an excellent complement to OSSTMM (refer to a
recent question posted to this forum by Stefano Zanero for more
information).
You might want to take a look at the most current Draft and consider
contributing (it is already over 1200 pages long ;-)):
http://www.oissg.org/content/view/71/71/.
Best regards,
Omar A. Herrera
Chairman, ISSAG Steering Committee
-----Original Message-----
From: Joel Jose [mailto: joeljose420@gmail.com]
I have set on a project to make a penetration testing tools
methodology, which i have tentatively called ospttm(open source
penetration testingtools manual). With the help of the community, and
my professional experiences i am trying to take it to its first
version. Although very little has been done, if at all anything this
draft indicates what this project is expected to be about. I am hoping
that my fellow pentesters will comeout and give their contributions.
Together with all our best practises and experiences, it is hoped that
ospttm can make life easier(a little bit) for the penetration tester.
the current draft is posted here: http://ospttm.pbwiki.com/FrontPage
------------------------------------------------------------------------------
This List Sponsored by: Cenzic
Concerned about Web Application Security?
Why not go with the #1 solution - Cenzic, the only one to win the Analyst's
Choice Award from eWeek. As attacks through web applications continue to rise,
you need to proactively protect your applications from hackers. Cenzic has the
most comprehensive solutions to meet your application security penetration
testing and vulnerability management needs. You have an option to go with a
managed service (Cenzic ClickToSecure) or an enterprise software
(Cenzic Hailstorm). Download FREE whitepaper on how a managed service can
help you: http://www.cenzic.com/news_events/wpappsec.php
And, now for a limited time we can do a FREE audit for you to confirm your
results from other product. Contact us at request@cenzic.com for details.
------------------------------------------------------------------------------
