> if it's an inhouse or custom software they've never seen before they likely won't be of much help without a lot of effort For web apps, there are ready-made

> if it's an inhouse or custom software they've never seen before they likely won't be of much help without a lot of effort For web apps, there are ready-made packs of exploits looking for common vulnerabilities. Not sure about desktop software, though.