mailing list archives
RE: what happened to the web testing methodology
From: "Mark Curphey" <mark () curphey com>
Date: Mon, 14 Jun 2004 10:25:12 -0400
Part 1 is in final edit (final before being sent to a professional tech
writer). We will release a copy next week at the OWASP Conference and then
make the draft generally available next week.
Dan Cuthbert is heading up Part 2 (the hands on technical stuff) and has
just started on that. There are a few sections already done such as session
token analysis by Glyn Geoghan.
From: Mads Rasmussen [mailto:mads () opencs com br]
Sent: Monday, June 14, 2004 7:14 AM
To: webappsec () securityfocus com; Mark Curphey
Subject: what happened to the web testing methodology
What happened to the methodology that David Endler started? The latest
version I have in my archives is 0.7 from 2003.
Mark, is the project dead? You started a new testing document, but not quite
with the same context.
Mads Rasmussen, M.Sc.
Open Communications Security
+55 11 3345 2525