Methodology for Penetration testing

Galera segue alguns links sobre metodologias para pentest.


Bluetooth Penetration Testing Framework A Bluetooth penetration testing framework http://bluetooth-pentest.narod.ru/

CCWAPSS CCWAPSS is a comprehensive security scoring methodolody dedicated to web application pentests. This scale aims at sharing a common, open and documented evaluation methodology between security auditors and final customers. http://ccwapss.blogspot.com/


Information Systems Security Assessment Framework Open source security methodology. http://www.oissg.org/issaf


ISECOM ISECOM is an open, collaborative, security research community established in January 2001. In order to fulfill its mission focus to apply critical thinking and scientific methodology to all facets of security, ISECOM is chartered as a commercial-free and non-partisan organization. ISECOM is registered non-profit organization operating from Barcelona, Spain and New York, USA. http://www.isecom.org/

OSSTMM - Open Source Security Testing Methodology Manual This Open Source Security Testing Methodology Manual (OSSTMM) provides a methodology for a thorough security test, now referred to as an OSSTMM audit. An OSSTMM audit is an accurate measurement of security at an operational level, void of assumptions and anecdotal evidence. http://www.isecom.org/osstmm/


Penetration Testing Framework 0.4 This is an excellent penetration testing framework, full of information for pentesters out there. http://www.vulnerabilityassessment.co.uk/Penetration%20Test.html

Pre-site Inspection ChecklistA checklist for pre-site inspection. http://www.vulnerabilityassessment.co.uk/Presite%20Inspection.html

SIP Forum Test Framework (SFTF)The SIP Forum Test Framework (SFTF) was created to allow SIP device vendors to test their devices for common errors. And as a result of these tests improve the interoperability of the devices on the market in general. The SFTF was created by the SIP Forum Technical working Group, and is maintained here on the SIP Foundry website because the SIP Foundry has the appropriate development and other infrastructure required to properly distribute this open source project. http://www.sipfoundry.org/sip-forum-test-framework/sip-forum-test-framework-sftf.html

Good Studies 4 all!!