full-disclosure - Automated Vulnerability Scanners

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri Feb 24 19:37:06 2006
From: dudevanwinkle at gmail.com (Dude VanWinkle)
Subject: Automated Vulnerability Scanners

On 2/24/06, Q Beukes <full-disclosure@...t.za.net> wrote:
> no, what I was talking about was programs/algorithms that actually
> scan software to find new unknown problems.
>
> i have never heard of anything like this myself nor can't think of an
> efficient way
> of implementing it, yet someone claimed they exist.
>
> I can't find any on google either?

Are you talking about something that looks through the source code for
a bad malloc implementation, or something that will try to go through
the assembly for an off-by-one error?

-JP