Hacker News new | ask | show | jobs
by dahfizz 2471 days ago
Metasploit? You don't even need to host it (why are we so obsessed with making everything a website?)
2 comments

Metasploit isn't the best choice for webapps, you probably want nikto or similar. Here's the owasp list: https://www.owasp.org/index.php/Category:Vulnerability_Scann...
The key part is automation, not a website. Make it part of your ci/cd pipeline.