RE: Pen Test liability waiver form

From: David Ball (lostinvietnam@hotmail.com)
Date: Fri Feb 17 2006 - 05:10:27 EST


Next time you're browsing in you favorite computer book store check out a
copy of "The Ethical Hack: A Framework for Business Value Penetration
Testing" by James S. Tiller. (Amazon will have the ISBN). Not only is it a
great read but page 156 has a quite comprensive sample legal agreement. Not
sure if the book's copyright would prevent you from using it as a starting
point. The following page has a sample Get out of Jail Free card.

Always check with your legal dept on exact wording.

David.
>
>"Chris Serafin" <chris@chrisserafin.com>
>No Phone Info Available
>02/15/2006 11:04 PM
>
>To
><e.lewis@infosecurityconsult.com>, <pen-test@securityfocus.com>
>cc
>
>Subject
>RE: Pen Test liability waiver form
>
>>Try sans.org, I know they have a bunch of vanilla policies.
>
>Chris Serafin
>IT Security / VoIP Engineer
>chris@chrisserafin.com
>
>-----Original Message-----
>From: e.lewis@infosecurityconsult.com
>[mailto:e.lewis@infosecurityconsult.com]
>Sent: Tuesday, February 14, 2006 10:27 AM
>To: pen-test@securityfocus.com
>Subject: Pen Test liability waiver form
>
>Hello Everyone!
>
>
>
> Does anyone know where I can find a good pen-test Liability
>waiver? I need a good one that I can alter to fit my needs. I know im
>being
>lazy. :-)
>
>----------------------------------------------------------------------------
>--
>Audit your website security with Acunetix Web Vulnerability Scanner:
>
>Hackers are concentrating their efforts on attacking applications on your
>website. Up to 75% of cyber attacks are launched on shopping carts, forms,
>
>login pages, dynamic content etc. Firewalls, SSL and locked-down servers
>are
>
>futile against web application hacking. Check your website for
>vulnerabilities
>to SQL injection, Cross site scripting and other web attacks before
>hackers
>do!
>Download Trial at:
>
>http://www.securityfocus.com/sponsor/pen-test_050831
>----------------------------------------------------------------------------
>---
>
>
>
>
>------------------------------------------------------------------------------
>Audit your website security with Acunetix Web Vulnerability Scanner:
>
>Hackers are concentrating their efforts on attacking applications on your
>website. Up to 75% of cyber attacks are launched on shopping carts, forms,
>
>login pages, dynamic content etc. Firewalls, SSL and locked-down servers
>are
>futile against web application hacking. Check your website for
>vulnerabilities
>to SQL injection, Cross site scripting and other web attacks before
>hackers do!
>Download Trial at:
>
>http://www.securityfocus.com/sponsor/pen-test_050831
>-------------------------------------------------------------------------------
>

_________________________________________________________________
Get 10Mb extra storage for MSN Hotmail. Subscribe Now!
http://join.msn.com/?pgmarket=en-hk

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:

Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:32 EDT