Dangerous exploitations

摘要

One of the most common questions my clients ask me is what tools will I use to carry out the security assessment of their system or application. In some cases, this question may be driven by a fear that, owing to the fact that my parent organization is well known for producing vulnerability scanning products, I would restrict my investigation to only these tools. In more competitive situations, the client has decided to focus on the type and number of tools that will be utilized - the classic 'mine's bigger than yours' contest of, "so and so says they can detect 5,465 vulnerabilities against your 3,891."