Return to the Framework
Wrote a few more security tests and now sit at 201 written. I’m going to leave it at that for the moment as I return to working on the Security Test Framework. As I’ve been writing the security tests and going over nessus-plugins I’ve gotten a much better idea of how I [...]
And You Don’t Stop…
The current count is now 181 security tests written. Still pushing toward 250, hoping the reach that later on this evening.
Stepping Up
Put in some extra effort yesterday working on the Sussen security tests. We now have 125 security tests written out of our initial target of 250. Work on new security tests continues today.
Confessions of Security Test Writer
Yeah I’m still writing security tests Currently I’ve got about 35 written out of my inital target of 250. For those with math issues, that’s about 14% complete.
I’ve also got a nice TODO list with things I need to do to the Security Test Framework so I can write [...]
Even More Tests
The security test writing continues. I made some changes to the HttpResource class in the STF to support authentication. I’m still not completely happy with the way the STF works today and I’ve got some more ideas for improvements but I still need to flush those out. In addition, I’ll [...]
Writing More Security Tests
Working on writing more security tests today. What I’m doing is going through the nessus-plugins and porting the code from NASL to C#. As I port code, I’m also refining the Security Test Framework.
Right now the STF only supports HTTP based tests. So the tests I’m writing are all web [...]
Working on the Framework
I’ve been working on the Security Test Framework today. There are three main interfaces which are Tests, Resources, and Queries. When you write a ITest, you create a IResource and can perform actions on it. You would use a IQuery object to examine the outcome and record the results.
As I write more [...]