Penetration Testing mailing list archives

Re: How to find if exploit exist to a reported CVE ?


From: Joey Peloquin <joeyp () cotse net>
Date: Wed, 07 Nov 2007 18:50:09 -0600

Walsh, Leo wrote:
I don't personally know of any place that tracks CVE to exploit code nor
a place that tracks all exploit code.

http://milw0rm.com/ is an exploit repository.

http://www.osvdb.org/ is a vulnerability db, staffed by volunteers, who
research disclosed vulns, and document them thoroughly, citing the many
disparate sources of vuln information around the world.  CVE and milw0rm are
just a couple sources researched when mangling a vuln.

-jp

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: