Penetration Testing: Re: How to find if exploit exist to a reported CVE ?

[Joey Peloquin <joeyp () cotse net>]

Walsh, Leo wrote:
> I don't personally know of any place that tracks CVE to exploit code nor
> a place that tracks all exploit code.
http://milw0rm.com/ is an exploit repository.

http://www.osvdb.org/ is a vulnerability db, staffed by volunteers, who
research disclosed vulns, and document them thoroughly, citing the many
disparate sources of vuln information around the world.  CVE and milw0rm are
just a couple sources researched when mangling a vuln.

-jp

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------