Updated Vulnerability Assessment Framework

Just a quick note that Kevin at http://www.vulnerabilityassessment.co.uk has a new version of his excellent framework diagram –

http://www.vulnerabilityassessment.co.uk/Framework.png

Good stuff, check it out. I’m a big fan of the pen testing processes he puts up, very methodical.  Also check out his ace default password list:

http://www.vulnerabilityassessment.co.uk/passwords.htm — wish I’d had that at Buenos Aires airport, as their wireless routers didn’t seem to be particularly well configured (and of course I’d forgotten to re-build nessus on the Powerbook, joy.)