Updates automated_vulnerability_scanners.md

            * [Cross Site Request Forgery](cross_site_request_forgery.md)

            * [Cross-site-scripting](cross-site-scripting.md)

                * [Examples](examplesXSS.md)

            * [Browser vulnerabilities](browser_vulnerabilities.md)

            * [Java applet](java_applet.md)

            * [Browser Vulnerabilities](browser_vulnerabilities.md)

            * [Java Applet](java_applet.md)

    * [Automated Vulnerability Scanners](automated_vulnerability_scanners.md)

* [Exploiting](exploiting.md)

    * [Social Engineering - Phishing](social_engineering_-_phishing.md)

# Automated Vulnerability Scanners

Everyone on the interwebz that says they know something about pentesting will talk shit about nessus and say that it is for lazy pentesters, it creates too much noise, and that it produces too many false positives. That may be true, I don't know. But from a learning perspective it can be really creat. It can help to show you what kind of vulnerabilites are out there. So whatever, do what you want. 

Everyone on the interwebz that says they know something about pentesting will talk shit about nessus and say that it is for lazy pentesters, it creates too much noise, and that it produces too many false positives. That may be true, I don't know. But from a learning perspective it can be really great. It can help to show you what kind of vulnerabilities are out there. So whatever, do what you want. 

## Server side scanning