Tag Info

Hot answers tagged

2

As a tester part of your job is to provide information and to advise others (BAs, Developers, Managers etc.) about the state of the system and any potential risks. With this in mind, what I'd do in your situation is to research examples of this problem and the potential effects. To appear more credible you could outline best case scenarios (e.g. distribution ...


2

Personally I always get a bit concerned about "what should I test" questions around security testing, because if you need to ask, you really shouldn't be doing security testing. That said you need to start with a threat model do determine the potential attack vectors and then proceed from there. Your application really needs to follow some form of Security ...


1

I have no experience with security testing of web-applications. But if you look at alternatives to Burp which Sam Woods mentions. Then w3af looks like a solid open-source alternative. w3af is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to help you secure your web applications by finding and exploiting ...


1

This is a technique in penetration testing to detect a vulnerability called "Insecure Direct Object References", 4th on OWASP Top 10 list. Regarding whether this is security or confidentiality testing. I would say both as confidentiality is just one of the measures in security testing: A security measure which protects against the disclosure of ...


1

Pls find useful links (references) to get started http://resources.infosecinstitute.com/net-penetration-testing-test-case-cheat-sheet/ https://www.pentesterlab.com/exercises/ http://darkassassinscybercrew.blogspot.in/2013/01/sqlmap-tutorial-for-window-7.html http://www.fuzzysecurity.com/tutorials/4.html



Only top voted, non community-wiki answers of a minimum length are eligible