Writing More Security Tests

Working on writing more security tests today. What I’m doing is going through the nessus-plugins and porting the code from NASL to C#. As I port code, I’m also refining the Security Test Framework.

Right now the STF only supports HTTP based tests. So the tests I’m writing are all web based. We’ll be adding more in the near future.

In terms of descriptions and what not, it’s currently very quick and dirty information. This is due to previous problems with the Nessus author accusing us of violating his copyrights.

In future releases test metadata will be cleaned up and fully written. For now, due to lack of resources, we have to do this in stages.

I’ve got a dentist appointment in 15 minutes so that’s it for now.