full-disclosure - Re: security industry software license

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 16 Oct 2008 21:41:02 +0100
From: n3td3v <xploitable@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: security industry software license

the double edged sword of metasploit continues. while we acknowledge
its a double edged sword, does that mean we don't need to monitor the
bad edge of that sword? that is the point n3td3v has been making.

and in a news report today by cnet news, they acknowledge:

On Thursday, new code was put on the Internet that could exploit a
flaw in unpatched Host Integration Servers.

The exploit is part of Metasploit, a toolkit used by penetration
testers and criminal hackers alike.

... that criminal hackers use metasploit as well.

so shouldn't metasploit and the govt be working together to share data?

im in full support of metasploit sharing data with the govt, but the
thing you must do is have a privacy policy in place as well.

http://news.cnet.com/8301-1009_3-10068161-83.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/