EvilZone
Hacking and Security => Beginner's Corner => : NokRaY January 27, 2015, 09:29:01 PM
-
Hi! ;)
I have tried many vulnerability scanners, but each scanner gives me different results. So, I'm looking for the best, vulnerability scanners!
Anyone have sugestions? :P
-
Quoting your profile: "Newbie at moment. Expanding my knowledge" and "Learning hacking"
Do yourself a favor and ban the word "vulnerability scanner" out of your dictionary, if you really wan't to "learn hacking"
-
I agree with d!amond. If it's hacking you wanna learn, check for SQL or OS vulnerabilities yourself (for example)
However, if you want to become a skid, be my guest. Also, what are these said "results"? And also, do you realize there are different types of scanners? Details would be nice.
-
Perfect! *Banning "vulnerability scanner" out of my dictionary*
-
Perfect! *Banning "vulnerability scanner" out of my dictionary*
No wtf don't do that. Just try to learn things first and once you've checked for something so many times manually you can't stand it anymore use a vuln scanner. That doesn't mean you should stop completely - just not now.
-
Ok... So, I need to learn how to find vulnerabilities manually and then ban "vuln scanner" out of my dictionaty, right?
-
Ok... So, I need to learn how to find vulnerabilities manually and then ban "vuln scanner" out of my dictionaty, right?
No man, just learn. Even the best of us scan at times, but know how to detect them manually at first. Delete "using a tool cause it werks" out of your vocab, kay?
Learn because some of these scanners don't tell you all the details and with some more advanced exploits, you might need them. Buuut, by then you should be able to script your own shit.
-
Best vulnerability scanner? Your brains.. ;)
-
to scan what ?
-
I recommend you learn...not use tools. If you really want to become a hacker you would want to know how exploits and such works.
-
Use tools become a cracker, to figure how thing works finding weakness to just learn from them you are a hacker.
-
Use tools become a cracker, to figure how thing works finding weakness to just learn from them you are a hacker.
(http://img.4plebs.org/boards/pol/image/1385/83/1385835837469.jpg)
-
(http://img.4plebs.org/boards/pol/image/1385/83/1385835837469.jpg)
I love you.
-
Well, scanner aren't that bad when you lack time to do some stuff yourself.
Of course you have first to read paper , and how vulnerability work starting by the nicely documented site of OWASP.
Then you can start to try yourself on different site like hackme or hackthissite.
Once to take a grasp of it take a look at ZAP,Burpsuit,w3af etc ... oh and sqlmap ofc.
Everyone telling you to ban vulnerability scanner from your vocabulary don't know how it make life easier when you try to find some vulnerability.
The cons is the number of request he does... and it doesn't mean that you shouldn't test for vulnerability yourself.
If you learn "hacking" hum ... well you will often end up using both scanner and manual test.
They are going together.
Although your message, "I got some results" means shit to me.
Doesn't prove anything, be more precise : I tested blabla and got blabla vulnerability in x times.
but bloblo found less vulnerability but was really fast .
Some samples are good too.
A good process when you talk with this community, show them that you did research and that you did your homework.
-
Very vague question.I agree, do some research before posting.
With that said, for networks check out nmap (http://nmap.org/), or the gui version zenmap (http://nmap.org/zenmap/). Great tool! Websites I find myself checking for exploits manually but tools like Vega are a good backup.
Definitely do not ban vulnerability scanners! I found myself using them in the beginning and learned more about what they were looking for over time. I could then do it myself, more in depth!
Good luck
-
Nmap and nikto are the two I like to use. All these dudes bashing on vulnerabity scanners act like they are 1337 haxors , when you know they are still using them :)
-
Nmap and nikto are the two I like to use. All these dudes bashing on vulnerability scanners act like they are 1337 haxors , when you know they are still using them :)
Totally agree with you, there are vulnerability scanners that even analyse the vulnerability for you. So yes they are useful and it worth using them.
-
Psssssft, uniscan or some shit