Kategori: Scanning and Tools
Choosing Scan Windows That Don’t Break Production
How to build scan windows by load profile, zone, and freeze calendar, and how to measure whether a window actually fits your…
Nmap Timing Templates: Picking -T for Real Networks
How nmap's -T0 to -T5 templates actually change parallelism, retries, and timeouts, and how to tune scan-delay and RTT flags for real…
Tuning Scan Concurrency Without Saturating the Network
Learn how to size parallel hosts, checks per host, and connection limits against firewall session tables so scans finish fast without disrupting…
Scanning Fragile Devices: OT, Printers and Embedded Hosts
How to scan PLCs, printers and embedded hosts without crashing them: safe-check profiles, passive discovery, rate limits and OT sign-off procedure.
How a WAF Changes What Your Web Scanner Reports
A WAF between scanner and target can turn a real vulnerability into a clean result. How to detect the interference and separate…
How Long Should a Vulnerability Scan Actually Take?
Baseline durations for discovery, credentialed host scans, web app crawls and container scans, plus how to profile bottlenecks and set realistic SLAs.
Backported Patches: Why Scanners Flag Patched Servers
Why RHEL, Debian and SUSE backports trigger a backported patch false positive, and the changelog and package evidence that proves a CVE…
7 Real Causes of Vulnerability Scanner False Positives
Seven concrete reasons scanners misfire, from banner inference to stale plugin logic, plus the evidence you need before you close a finding…
SAST, DAST and SCA: What Each Scanner Type Can See
SAST reads source code, DAST attacks the running app, and SCA reads dependency manifests. What each class actually proves, and where each…
Setting Up SSH Credentials for Linux Authenticated Scans
Configure SSH key auth and scoped sudo for Linux vulnerability scans without granting root, and learn to catch silent partial-credential scan failures.