Penetration Testing: re: application security testing training

[Alfred Huger <ah () securityfocus com>]

Hi all,

> I am looking for application security testing training, most of the
companies
offer security testing course targeted >for infrastructure security like
how to
pen test a sql server, IIS etc  I want something like code review, memory
> leaks, reverse engineering, writing buffer overflow exploits etc..
> Though I have googled it, I would appreciate if someone can provide
comments if
he/she has already undergone such >training.


I have have had CORE Security in-house to train people in this and
recently sent staff to Immunitysec for training in this arena. Both
vendors got very high marks from the people who attended.

-al


Alfred Huger
Symantec Corp.