Re: Penetration Testing/Vulnerability Assessment

From: Emre Yildirim (emreat_private)
Date: Fri Sep 07 2001 - 21:37:59 PDT

  • Next message: H D Moore: "update on IIS 5.0 relative path vulnerability"

    Julias P wrote:
    
    > I have been reading about the reponses on "Security Audit" and I have learnt
    > quite a lot. I am currently working on implementing a security policy for my
    > organisation, before we hire some security consultant for review.  I think
    
    > vulnerability assessment goes hand in hand with penetration testing.
    
    
    
    Take a look at this:
    http://www.securityfocus.com/focus/basics/articles/policies.html
    
    
    > What about free tools I could use for penetration
    > testing.
    
    
    http://www.securityfocus.com/tools
    
    nmap (www.insecure.org) is also very useful.
    
    
    
    
    -- 
    Emre Yildirim <emreat_private>
    GPG KeyID 0xF9E4A1D1 (keyserver.pgp.com)
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Mon Sep 10 2001 - 07:58:25 PDT