What vulnerabilities do automated scanners find?
An automated scanner is good at finding these vulnerabilities:
- Known holes in the web server (IIS, Apache, etc.)
- Known holes in the sample applications that come installed with a web server
- Error messages thrown out by your application
- Any comments lying around in your HTML code
- Old source code lying around on your web server
- Misconfigurations in your web server