A Pentester's Guide: Osint, Breach Dumps, and Password Spraying

Re:A Pentester's Guide: Osint, Breach Dumps, and Password Sp... by EnFinlay on Wednesday April 10, 2019 @05:23PM (#19628932)

On one hand I agree with you, on the other hand I don't think the space is short on people writing their own tools. The number of DNS enumerators I've seen shared over the past month alone speaks to this.

[ Parent | on HN ]

Re:A Pentester's Guide: Osint, Breach Dumps, and Password Sp... by nubb on Wednesday April 10, 2019 @05:36PM (#19629040)

I cant disagree with you there :)

[ Parent | on HN ]

Re:A Pentester's Guide: Osint, Breach Dumps, and Password Sp... by bashwizard on Thursday April 11, 2019 @02:05AM (#19631572)

While custom tools are nice and all I don't really see the point of reinventing the wheel all the time.

If there is a tool/script/exploit/etc out there doing most of what I want, you can be sure that I'm going to use it and modify it to my needs instead of writing my own.

I'd say that's usually the case in 80% of the cases when doing pentests. Besides, time is money.

[ Parent | on HN ]