jetlib.sec » Penetration Testing » Web app assignments.

Feeds

133326 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Penetration Testing

• September 06, 2011
• 

  Web app assignments.

  Posted: September 6th, 2011, 6:52am PDT

  Tags:   

  Posted by cribbar on Sep 06

  Can I ask from a management perspective – when do you accept pen test
  assignments for clients specific to web applications and when don’t you. Say
  for example, company X comes to you and says they have bought a new “web
  app” and it turns out to be something like oracle financials. And they want
  you to test for stuff like SQL injection and what not.
  
  http://www.oracle.com/us/products/applications/ebusiness/financials/053262.html
  
  Do you...