Penetration Testing mailing list archives

Re: How to find if exploit exist to a reported CVE ?


From: "Justin Ferguson" <jnferguson () gmail com>
Date: Wed, 7 Nov 2007 20:59:38 -0800

any of the places you'd expect to find that type of thing, aka what
has already been mentioned; however if you're actually trying to do
something like determine exploitability for trending or whatever then
its best to either diy or hire one of the many outside firms that do
that sort of thing.


On 11/7/07, Joey Peloquin <joeyp () cotse net> wrote:
Walsh, Leo wrote:
I don't personally know of any place that tracks CVE to exploit code nor
a place that tracks all exploit code.

http://milw0rm.com/ is an exploit repository.

http://www.osvdb.org/ is a vulnerability db, staffed by volunteers, who
research disclosed vulns, and document them thoroughly, citing the many
disparate sources of vuln information around the world.  CVE and milw0rm are
just a couple sources researched when mangling a vuln.

-jp

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------



------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: