Hello, what vulnerability scanners do you recommend. Of course free scanners and where it's work windows/linux etc?
Vulnerability scanners |
 
I bet you already read it but: Manually testing is always better. For several reasons like learning, gaining experience and less false positives.
Most free scanners are trash. Owasp Zap is quite okay. I can highly recommend Burpsuite Pro. But also Netsparker. Feel free to pm me for clean sources from other forums. (Jan 14, 2022 04:50 PM)AncientGod Wrote: I bet you already read it but: Manually testing is always better. For several reasons like learning, gaining experience and less false positives. pm me. I cant send message to you  (Jan 14, 2022 04:50 PM)AncientGod Wrote: I bet you already read it but: Manually testing is always better. For several reasons like learning, gaining experience and less false positives. That really depends on what your using it for. If you are a bug bounty hunter, you can use them in your automation work flow, to scan all of the subdomains for possible vulnerabilities over the night and then you manually go and check them out. You can then make a PoC for them, submit a bug, and then get that sweet hunter money! I use OpenVas, Nuclei, and Zap. 
Jan 20, 2022 09:10 AM
(This post was last modified: Jan 20, 2022 09:14 AM by SIM-2501407.)
(Sep 9, 2021 09:56 AM)Beladonis Wrote: You have, among others, OpenVAS, Nikto and Owasp ZAP.You must know what you’re doing; those are solid resources. I have never heard of OpenVAS; I’ll check it out. OWASP Zap is the only one i have used out of that list and for being free, is great. Gitlab has DAST for a cost but for static, it’s free. https://docs.gitlab.com/ee/user/applicat...rity/sast/ May be worth using too. What a grave dig on this thread btw. Bringing this back to life this month. Lmao Code |
|
|
