Security Basics mailing list archives

Re: Pen tester


From: morin.goth () gmail com
Date: 18 Mar 2008 13:55:32 -0000

I'd give a try for McAfee Foundstone if you want commercial software. It's got an appliance version or you can install 
it on win2003 with mssql db, etc.  It's quite fast and effective. I did not have time to check the average rate of 
false positives but it seems to be usable.
Btw, using only commercial softwares is maybe not the most effective idea since there are many good tools. :)
E.g. GFI's LANGuard is full of false positives. It seems to be good for nothing just to waste a lot of time.


Current thread: