Chapter 9

1. CVE stands for Common Vulnerabilities and Exposures. It is a system for allowing different tools and organizations to share data about known vulnerabilities.
2. WordPress is used by such a gigantic portion of the web that it makes a rich target for hackers. Also, PHP, as a dynamically-type language, has its own weaknesses.

3. The wpscan CLI allows for greater integration with your existing automation suite, but the Burp extension better supports passive scanning functionality.
4. Always keep in mind the opinionated structure of Rails and historical weaknesses with session authentication when probing for vulnerabilities.
5. Docker provides a simple, containerized structure for encapsulating any dependency set your tools might need, making them more portable and extensible.
6. OVAL stands for Open Vulnerability Assessment Language and is a series of definitions for standardized, machine...