Re:NextCloud, a security analysis
by simplehuman on Sunday March 26, 2017 @04:10PM
(#13962942)
Yeah, I run things on my own. 6k is out of my league. I am surprised this costs so much. Can it not be automated?
[ Parent
| on HN ]
Re:NextCloud, a security analysis
by sillysaurus3 on Sunday March 26, 2017 @04:19PM
(#13963007)
Nope. It takes at least a couple months of doing daily pentests to become proficient at finding vulns. As to why it can't be automated, it takes a book to answer that. I'd recommend The Web Application Hacker's Handbook, along with The Tangled Web.
There are things you can do, of course. But unless your app is basically read-only, there are almost always one or two noteworthy vulns.