
Q: Wouldn’t the tool presented in this chapter have an enormous amount of false
positives?
A: Yes, the tool used here is only as good as the data that is parsed from within the
text database. In nearly all cases, the text database merely looks for a HTTP 200
OK response.
Q: How can I minimize false positives within this scanner?
A: There are two ways to cut down on errors or false responses from this tool.The
first is to add multiple tokens to the Web fingerprint file that should be adequate
for significantly minimizing false positives and false negatives.The second way of
increasing the accuracy of this tool would be to add in a “pre-check” module
that w ...