Re: Pen testing web servers

[infolookup () gmail com]

I am not a professional Pentester but I think it all depends on what you are looking for.

Ex SQL injection, hidden directories, XSS, once you have that covered I would take a look at OWASP.org among other 
sites and look at some of there testing guides.

Again just my .02 
------Original Message------
From: Kevin P Biggs
Sender: listbounce () securityfocus com
To: pen-test () securityfocus com
Sent: Dec 19, 2008 6:10 PM
Subject: Pen testing web servers

What does everyone consider the best pen tool for testing web servers?
I have tried Nessus.
What tool(s) do you recommend?

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Security Trends Report from Cenzic
Stay Ahead of the Hacker Curve!
Get the latest Q2 2008 Trends Report now

www.cenzic.com/landing/trends-report
------------------------------------------------------------------------



Sent from my Verizon Wireless BlackBerry

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Security Trends Report from Cenzic
Stay Ahead of the Hacker Curve!
Get the latest Q2 2008 Trends Report now

www.cenzic.com/landing/trends-report
------------------------------------------------------------------------