New answers tagged vulnerability-scanners
1
Your searches must have missed the GitHub repo, which is highlighted on w3af.org.
Examples are all there.
6
There exists a policy shipped as part of the distribution service called "Prepare for PCI-DSS audits (section 11.2.2)". This is a policy that has all plugins enabled, TCP scan of all ports, safe checks enabled, web tests enabled, the PCI-DSS setting enabled, and several other things that are less important. I would recommend copying this policy to something ...
1
Honestly, based on whats been discussed in the comments, this doesn't sound like a hosting provider you trust at all. If that's really the case, the PCI auditor was right to fail you on this count. Why are you trusting them with PCI data?
You need to either move these assets in house or move them to a different provider that you trust.
In addition, rather ...
-1
If you have to have this type of interaction with the Service Provider, you have a bigger security risk than Windows Server 2003 SP1... that bigger security risk IS the security provider.
Fire them as quickly as you can, and find another.
3
In order for such evidence to be accepted, it needs to be possible to tie the information in the image showing the Service Pack level to the system (IP address/URL) being scanned by Trustkeeper. A screenshot that has different windows open that shows you're providing appropriate evidence for the correct system should do the trick.
Do you know if the Service ...
8
That seems to be a NetGear log entry, there are two possibilities for this:
SYN Port Scan: Someone (very likely automated, by an infected machine) attempting to scan your machine. They send a SYN packet to you, then your machine responds with an ACK packet. In order to prevent a connection from being established, they send you an RST (Reset) packet. (More ...
1
Surprisingly, nobody answered how to use google dorks. It's easy - paste them into the Google search box and look at the results.
For example, https://encrypted.google.com/search?q=filetype:config%20inurl:web.config%20inurl:ftp
I bet some of them no longer work, because the original GHDB is old and Google has changed quite a few details of handling ...
1
Google Hacking refers to the practice of using search engines, like Google and Bing, in order to discover vulnerable web pages and critical information. It's based on the idea that search engines index a lot of public pages and files, making their discovery a simple matter of building the correct query.
For example, it's trivial to look for a specific type ...
Top 50 recent answers are included
