Mastering Kali Linux for Web Penetration Testing

NIST publications

NIST has, for almost three decades, released special publications to provide best practices and guidance in many technology areas, and the Computer Security Resource Center (CSRC) has led the way in providing many freely accessible publications in the area of cyber security defense. NIST has also released valuable guides for testing the efficacy and coverage of an organization's security approach.

NIST's first foray into this area, their special publication, Technical Guide to Information Security Testing and Assessment (NIST 800-115 (http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-115.pdf), is somewhat dated and now is no longer maintained manually. It is worth the time to reference SP 800-115, as it ...