Somewhere we are not sanitizing user input… Finding Manual Exploits What vulnerability is this?īroken Access Control. This could be command injection or may be SQLi. You are testing a web application and find that you are able to input and retrieve data in a database. Time is a precious resource, you have to use the tools available to you and leverage to get the job done in time! Would you use an automated scanner? (Yay/Nay) You are working close to a deadline for your penetration test and need to scan a web application quickly. There is some basic information about Nessus Vulnerability Scanner and also a look at the difference between doing an automated scan vs a manual scan. In this section we take a look at a brief introduction of vulnerability scanning.

Automated vs Manual Vulnerability Research