> Certainly it's crummy and dishonest For those of us who are less familiar with dsploit, can you explain why it's crummy and dishonest? All I know about it I

> Certainly it's crummy and dishonest For those of us who are less familiar with dsploit, can you explain why it's crummy and dishonest? All I know about it I got from reading the project's summary just now. Ostensibly, it's a penetration testing tool. Penetration testing is a legitimate and necessary part of security auditing. Can the tools and knowledge of the security industry be exploited by malicious attackers? Of course it can. But as the theory goes, blackhats are going to use the best available attacks regardless of whether whitehats publicize their tools and knowledge. Thus, it's better for legitimate developers to learn how to penetration test, share their tools, and spread knowledge of the exploits far and wide, so that legitimate developers the world over may know their enemy and better defend against attacks. Is there reason to believe dsploit is anything more nefarious than a legitimate penetration testing tool?