RE: Looking for some good sources

["Dinis Cruz" <dinis () ddplus net>]

Check out the OWASP Testing Project (http://www.owasp.org) which has
produced two excellent documents about Web Application Security Audits.

You can download the files from here:
http://sourceforge.net/project/showfiles.php?group_id=64424&package_id=62285

Best regards

Dinis Cruz
.Net Security Consultant
DDPlus


> -----Original Message-----
> From: jeffrey rivero [mailto:jeffr76 () yahoo com]
> Sent: 30 September 2004 00:49
> To: security-basics () securityfocus com
> Subject: Looking for some good sources
>
> Hello all
> we just got a contract to do a web application pen test.
> being that we usually are responsible for the the network side of
> things. i was looking for some kind of website security audit proposal
> that i could use as a template/guide (all tho these customers have
> specific items that they want tested). i could just use my network
> proposal but would like to create a new on.
> any one have a good source
> J