Tag Info

New answers tagged


I'd add my opinion on this. Let's say you have an application to test (I am not including thick clients here as it's pure web application). The conditions on which the estimation might rely are: Considerable Items Number of URL's which could be fetched via Burp's Spider Number of Parameters which could be fetched via Burp's Engagement tools Number of ...


You cannot provide proof that it will take n days for the vulnerability assessment. You can provide them with an estimation. When I scope an application for testing, there are a few things I look at. Most of it is what you've already covered. What the application does (process money or HR data, or serve a blog) How large the application is (a few ...

Top 50 recent answers are included