3 ms·
But what else would you propose? Only thing you could do which would be more accurate is to try to exploit all the issues it found, which isn't really practical
by Hitton 7y ago
But what else would you propose? Only thing you could do which would be more accurate is to try to exploit all the issues it found, which isn't really practical, because POCs are not always available and if they are, you would have to build some kind of database with all of them. Maybe it could be combined with Metasploit...
- jascii 7y agoTools like Metasploit can often be destructive, not sure I would want to run them against production by default.. A more reasonable approach would be to set up a lab when needed when one of the less invasive scanners flags a potential issue.