It's better to expose existing vulnerabilities. If the good guys don't create tools like this, the bad guys will.