Live data from Hacker News

Show HN: Enter your URL and view CVEs affecting your stack over last 6 months

secalerts.co

31–40 of 50 posts

Re: Show HN: Enter your URL and view CVEs affecting your stack over last 6 months

#31
post #22
post #20

Is there an open source alternative that could be self-hosted and configured to run automated and periodical checks?

Metasploit? You don't even need to host it (why are we so obsessed with making everything a website?)

Metasploit isn't the best choice for webapps, you probably want nikto or similar. Here's the owasp list: https://www.owasp.org/index.php/Category:Vulnerability_Scann...

Re: Show HN: Enter your URL and view CVEs affecting your stack over last 6 months

#33
post #20

Is there an open source alternative that could be self-hosted and configured to run automated and periodical checks?

While not a web or automated option - if you want to run a quick crawl and scan on your apps you could try OWASP ZAP, it also has quite a few handy plugins - https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Proje...

Re: Show HN: Enter your URL and view CVEs affecting your stack over last 6 months

#35

Finally, a place that can gather IP addresses and associate them to specific security products to have them hacked later. Just what I've been waiting for.

Alternatively, secure your stack and don’t have it hacked later.

Those self-managing their machines and sites could doubt if a break change or update would cause downtime, LXD/Docker could simplify on that and reduce the risk to only containers.

Re: Show HN: Enter your URL and view CVEs affecting your stack over last 6 months

#40

i don't need to provide my (potentially vulnerable) production URL to whoever-you-might-be in order to identify the last 6 months of vulnerabilities - I can just google for that. Submitting your site to this is just asking for trouble.

Then somebody else is going to do it for you.
Post reply on HN