Penetration Testing: Testing Middleware Application

[Anant Iyer <iyer.anant.r () gmail com>]

Hello,

We have a middleware application to be pen-tested for security
bugs.The application serves requests from various front-end systems
(XML over HTTP) and depending on these requests, retrieves the data
from various back-end repositories.
The development team has built a front-end just for testing
(functional) this application in the UAT environment. In such a
scenario, I need some pointers on how should I perform the pentest of
this middleware application.

Regards,

Anant Iyer

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------