OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Vulnerability vs. Pen test

From: Jeffrey Walton (noloadergmail.com)
Date: Fri Apr 24 2009 - 03:31:41 CDT

Hi James,

You might be interested in 'Nessus Network Auditing' by Carey,
Criscuolo, and Petruzzi (ISBN 978-1-59749-208-9) in addition to
Ulises' references.

Jeff

On 4/22/09, jlayslave-tothe-box.net <jlayslave-tothe-box.net> wrote:
> So part of PCI DSS requirements are for a quarterly vulnerability
> assessment, and a yearly pentest. My question is: is Nessus considered
> just a vulnerability scanning app? Thanks.
>
> James
>
> [SNIP]

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Tired of using other people's tools? Why not learn how to write your own exploits?
InfoSec Institute's Advanced Ethical Hacking class teaches you how to write stack and heap buffer overflow exploits for Windows and Linux. Gain your Certified Expert Penetration Tester (CEPT) cert as well.

http://www.infosecinstitute.com/courses/advanced_ethical_hacking_training.html
------------------------------------------------------------------------