A Penetration Testing Findings Repository

In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI)  Marisa Midler and Samantha Chaves, penetration testers with the SEI’s CERT Division, talk with Suzanne Miller about a penetration-testing repository that they helped to build. The repository is a source of information for active directory, phishing, mobile technology, systems and services, web applications, and mobile- and wireless-technology weaknesses that could be discovered during a penetration test. The repository is intended to help assessors provide reports to organizations using …

active directory applications build carnegie mellon carnegie mellon university cert directory engineering findings information miller mobile mobile technology penetration penetration testing phishing podcast repository sei services software software engineering systems technology testers testing university vulnerabilities weaknesses web web applications