RE: no standards for webapp exploitation

about the variable comment - reasoning:
the punters (company's) that buy my product (theoreticalally) want to build a script to check each server for X exploit. they should not have to think, and therefore should not have to use their own variables to accomplish this. example:

k = websec()
x = scanner()

k.settype("eeye.printer")
x.credentials("172.16.:80")
x.run(k)

extensible API's like that one would negate the need for punter interaction (PI) which can lead to all sorts of ghastly things.

an remember, its a hell of a lot easier to write tutorials for API's you've developed than that of languages you write in.

• ned

 On Thu, 3 Jul 2003, NC Agent wrote:

> Hi Ned,

-- 
http://felinemenace.org/~nd