First Impressions of the XRAY Vulnerability Scanner
0x01 Preface A few days ago I obtained XRAY Advanced and tried combining XRAY with AWVS to see whether I could rediscover vulnerabilities in a CMS listed by CNVD. CNVD advisories provide few details, so the vulnerable code must be located from the vulnerability type. If no filename is disclosed, this amounts to auditing the whole system from scratch…