AW: Best Book For The Penetration Testing Methodology

From: Dominick Baier (grps@die-lounge.com)
Date: Thu Sep 19 2002 - 08:27:42 EDT

Next message: Fermín J. Serna: "NGSEC's penetration test sniffer"
Previous message: Ofir Arkin: "The Trivial Cisco IP Phones Compromise"
In reply to: Julias P: "Best Book For The Penetration Testing Methodology"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hi,

try :

http://uk.osstmm.org/osstmm.en.2.0.zip
and
http://uk.osstmm.org/osstmm.pdf

greetings
dominick
ernw.de

-----Ursprüngliche Nachricht-----
Von: Julias P [mailto:pjulias@cbz.co.zw]
Gesendet: Dienstag, 17. September 2002 19:28
An: pen-test@securityfocus.com
Betreff: Best Book For The Penetration Testing Methodology

Hi,

I am looking for any advise on the best book to go for, in order for one
to better understand and practically apply the methodology for
penetration testing. I have read a couple of books on
security/vulnerability assessment but I feel one need a little bit more
than just security/vulnerability assessment in order to master
penetration testing. I have also been following this listing for quite
some time and now believe access to exploits is an added advantage for
pen testing, especially if you are not a programmer, although this may
be too dangerous. Which best sites for exploits would you recommend?

Thanks

DISCLAIMER: The information contained in this communication is
confidential and may be legally privileged or otherwise protected from
disclosure. It is intended solely for the use of the individual or
entity to whom it addressed. if you are not the intended recipient, you
are hereby notified that any disclosure, copying, distribution or taking
action in reliance of the contents of this information is strictly
prohibited and may be unlawful. Commercial Bank of Zimbabwe Limited is
neither liable for the complete transmission of the information
contained in this communication, any delay in its receipt or damage that
may be suffered by the unintended recipient.

------------------------------------------------------------------------

----
This list is provided by the SecurityFocus Security Intelligence Alert
(SIA) Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please
see: https://alerts.securityfocus.com/
----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

Next message: Fermín J. Serna: "NGSEC's penetration test sniffer"
Previous message: Ofir Arkin: "The Trivial Cisco IP Phones Compromise"
In reply to: Julias P: "Best Book For The Penetration Testing Methodology"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:25 EDT