TA-Mapper: Application Penetration Testing Effort Estimator

First release date: 01/01/2009 

Time and Attack Mapper (alternatively known as TA-Mapper) is an effort estimator tool for blackbox security assessment (or Penetration Testing) of applications. This tool provides more accurate estimation when compared to rough estimation. Penetration testers who always has hard time explaining/justifying the efforts charged (or quoted) to their customers can find this tool handy by able to calculate efforts with greater accuracy required for application penetration testing.

I wrote this tool back in 2004 to support some of my freelancing assessment. I was intrigued to write this tool when I was asked by one of my Fortune 100 customer to justify efforts quoted against the activities for a penetration testing assignment. It not just helped me win the project but also help me educate the customer in knowing the activities involved at the micro-level. After making few changes in the tool I thought I have kept it private too long and its right time to share it with the world.

Current Release

Date of Release: 20/09/2010: [TA-Mapper v1.1]

Whats New in v1.1? 

  • Advance effort "Optimise" option will allow users to optimise efforts based on automated and manual tests approach.
  • Option to generate reports both in MS Excel and HTML format.

Previous Releases

Date of Release: 01/01/2009 [TA-Mapper v1.0]