3 ms·
What vulnerability depends on a specific version banner? Surely you're not insisting that the actual bug be predicated on the fact that one version prints inste
by trotsky 15y ago
What vulnerability depends on a specific version banner? Surely you're not insisting that the actual bug be predicated on the fact that one version prints instead of another.
A server intrusion work flow that involves a version banner? Saint on /24 -> choose exploit & target based on results. I understand you've said either this isn't worth the tradeoffs or 0days aren't getting mass exploited this way, but it is hard to believe you really disagree that intrusions happen in this fashion.
- tptacek 15y agoThat's how security consultants break into machines. If you're arguing that someone with a very recent SSH remote is going to use Saint to scope out a target, no; doubt it.