RE: what happened to the web testing methodology

["Mark Curphey" <mark () curphey com>]

Part 1 is in final edit (final before being sent to a professional tech
writer). We will release a copy next week at the OWASP Conference and then
make the draft generally available next week.  

Dan Cuthbert is heading up Part 2 (the hands on technical stuff) and has
just started on that. There are a few sections already done such as session
token analysis by Glyn Geoghan. 

-----Original Message-----
From: Mads Rasmussen [mailto:mads () opencs com br] 
Sent: Monday, June 14, 2004 7:14 AM
To: webappsec () securityfocus com; Mark Curphey
Subject: what happened to the web testing methodology


What happened to the methodology that David Endler started? The latest
version I have in my archives is 0.7 from 2003.

Mark, is the project dead? You started a new testing document, but not quite
with the same context.

Regards,

--
Mads Rasmussen, M.Sc.
Open Communications Security
www.opencs.com.br
+55 11 3345 2525