Penetration Testing mailing list archives

Re: Tools to test web services


From: Marcelo Leão Caffaro <leao () employer com br>
Date: Mon, 3 May 2004 11:16:25 -0300

Hello, i think the syhunt security tools is a good choice to use in a
webserver security checks.

You can find more information about the syhunt suite in www.syhunt.com.

tks
Marcelo Leão Caffaro
Network Security Specialist

----- Original Message ----- 
From: "pak" <pak_ml () btopenworld com>
To: <pen-test () securityfocus com>
Sent: Saturday, April 24, 2004 6:14 AM
Subject: Tools to test web services


Hi,

I was asked to do penetration testing of web services built on .NET
Framework; therefore I'm looking for the tool that could test web services
and adequately supports standards such as WS-Security, SAML,
XML-Encryption,
XML-Signature. So far the only thing I could do is to write such tool on
my
own, but maybe there are tools out there (commercial and/or
non-commercial),
I'm not aware of, that can help me. Any help/suggestions/tools/papers what
and how to test are more than welcome.

Cheers,

Pak76


--------------------------------------------------------------------------
----
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or
less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the
skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
--------------------------------------------------------------------------
-----


------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
-------------------------------------------------------------------------------


Current thread: