In reply to Jeffrey.

Fortify we use against any web work we do. Xerox was gracious enough to allow us to use it against our work as we have a project loosely going on with them. Fortify does not target any particular application. There are a variety of hacker exploit ware's that do. In as far as the URL's of items it is actually something I am working upon in a framework here.

Certainly it can be very difficult to remove those footprints that web applications leave behind.

I am not part of the hacker cracker community but I am aware of it to an extent. I intend when or if we get a web blog up (being discussed Friday night) to address at least some base practices that webmasters should apply to getting more stealthy as well as perhaps taking a few hours to see whats out there in the public domain that they can use in as far as penetration testing software goes.

Last Friday there were 14 people at the pub, this week.... no idea. But I am hoping to get some or all of them onboard.