Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
mrlucax
on Sept 9, 2019
|
parent
|
context
|
favorite
| on:
Show HN: Enter your URL and view CVEs affecting yo...
Is there an open source alternative that could be self-hosted and configured to run automated and periodical checks?
smcleod
on Sept 10, 2019
|
next
[–]
While not a web or automated option - if you want to run a quick crawl and scan on your apps you could try OWASP ZAP, it also has quite a few handy plugins -
https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Proje...
dahfizz
on Sept 9, 2019
|
prev
[–]
Metasploit? You don't even need to host it (why are we so obsessed with making everything a website?)
Godel_unicode
on Sept 10, 2019
|
parent
|
next
[–]
Metasploit isn't the best choice for webapps, you probably want nikto or similar. Here's the owasp list:
https://www.owasp.org/index.php/Category:Vulnerability_Scann...
kortilla
on Sept 10, 2019
|
parent
|
prev
[–]
The key part is automation, not a website. Make it part of your ci/cd pipeline.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
