Most security holes found today can be discovered automatically. By using an automated attack tool that tries virtually every attack combination and has the ability to detect certain application anomalies and indicate a successful attack, security holes can be found with almost no user intervention.
Aviram Jenik