Re: [PEN-TEST] Pen-testing a website

["Teicher, Mark" <mark.teicher () NETWORKICE COM>]

http://www.qualys.com/services/index.htm
http://www.atelierweb.com/pscan/index.htm
http://www.hoobie.net/brutus/brutus-faq.html
http://www.cerberus-infosec.co.uk/cis.shtml <-- they are now @Stake.. :(

/m

At 06:00 PM 12/22/00 +0530, Charles wrote:
> Hi
>
> I want to test out the application that my developers have made for an
> E-Commerce site (E-Commerce meaning transaction-enabled).
> Essentially to test issues like these:
> - Mucking around with Cookies/Session IDs to find holes
> - Ability to hijack sessions
> - URL sequencing, etc
>
> I am looking for an exhaustive list of such cases.
>
> Any links, tools, help would be appreciated.
>
> Thanks
> -C