3 ms·
This isn't vulnerability scanning, it's proceeding to a full exploit.
by MattPalmer1086 3y ago
This isn't vulnerability scanning, it's proceeding to a full exploit.
- eli 3y agoSure plenty of automated tools do that.
- MattPalmer1086 3y agoYeah, it's not an entirely novel ability. What is novel is that an LLM can do the hacks on its own with just a general description of them. Even the automated tools I know need some skilled human input to really use them effectively. I've seen pen testers fail to find vulnerabilities I know exist using things like Burp suite and Metasploit. So I guess I agree this is not a game changer right now, but I think it will only get better, and will ultimately reduce the cost of attacks at scale.
- viraptor 3y agoTenable has been advertising that feature (providing a sample malicious request) for something like 10 (?) years already.