Re: [Full-disclosure] Requesting penetration test resources

[bugtraq@xxxxxxxxxxxxxxx]

Here are some links related to web application pen testing.

SQL Injection
http://www.cgisecurity.com/development/sql.shtml

Cross Site Scripting
http://www.cgisecurity.com/development/xss.shtml

Other Specific Web Application Attacks
http://www.cgisecurity.com/pen-test/

The Web Security Threat Classification
http://www.webappsec.org/projects/threat/

The Web Security Mailing List
http://www.webappsec.org/lists/websecurity/
Web Archive: http://www.webappsec.org/lists/websecurity/archive/2005-11/

- admin@xxxxxxxxxxxxxxx
http://www.cgisecurity.com

> 
> I would be grateful if someone could provide some providers to resources 
> where I might be able to learn the fundamentals of penetration testing 
> for network security. I have researched a lot of web sites and found a 
> couple of gems but it can be hard sorting out the wheat from the chaff 
> sometimes, especially when you're a relative novice.
> 
> Thanks.
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/