Penetration Testing mailing list archives

Re: Exploit Archive


From: "A.R." <r00t () northernfortress net>
Date: Wed, 18 Aug 2004 20:03:41 +0000

On Tue, 2004-08-17 at 13:43, DeMott Jared wrote:
I know that I can identify
"potential" flaws using Nessus, but my boss has asked that I prove to
him each and every "potential" weakness.  I've been told that you can
find many exploits out on the web, but it's been such a hassle trying to
find all of what I'm looking for!

Nessus provides you, for each "potential" vulnerability, with the
Bugtraq ID (BID) of the vulnerability itself. With that ID, you only
have to look for the vulnerability description on securityfocus.com,
where you can find the relative public exploits.

Other places where to look for more exploits have already been suggested
;)

Hope this helps

Alberto Revelli
Northern Fortress Inc.

-- 
"The Church is near but the road is icy. The bar is far away but I will
walk carefully."
        
        -- Russian Proverb


------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.

http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817
-------------------------------------------------------------------------------


Current thread: