3 ms·
I tried to implement similar thing so I kudo people for completing it. What is actually very useful IMO is being to use this in vulnerability testing. All the a
by yeukhon 11y ago
I tried to implement similar thing so I kudo people for completing it. What is actually very useful IMO is being to use this in vulnerability testing. All the automated pentesting tools I know of can only touch the very basic vulnerability in a blackbox way. Imagine you can capture some sample traffic coming into your web server. Now most requests go through very similar routes. Rarely you will find a user hitting page X from page Y especially if page Y is some API people rarely would use or protected. You can also use the sample traffic and learn if there are any potential malicious payload. It's like putting up a real firewall I guess.