New Robots page
Copy link to “New Robots page”We've replaced the old Robots page with a new page where you can easily sort, filter and more with our new design.
Changelog
These are the latest updates we've made to our platform. If you have any questions about any of the updates you see below, please feel free to contact us!
Date
October 2022
Detection for CVE-2021-39226 (Authentication Bypass in Grafana)
Copy link to “Detection for CVE-2021-39226 (Authentication Bypass in Grafana)”Network Scanner can now detect if a Grafana server is vulnerable to Authentication Bypass (CVE-2021-39226).
Detection for CVE-2022-41040/41082 - ProxyNotShell (RCE in Microsoft Exchange Server)
Copy link to “Detection for CVE-2022-41040/41082 - ProxyNotShell (RCE in Microsoft Exchange Server)”Network Scanner can now detect if a Microsoft Exchange server is vulnerable to Remote Code Execution (CVE-2022-41040/41082).
CMS Scanners in Robots
Copy link to “CMS Scanners in Robots”Added the possibility to chain the CMS Scanners within the Pentest Robots.
New Workspaces page
Copy link to “New Workspaces page”We've replaced the old Workspaces page with a new page where you can easily sort, filter and more with our new design.
Notification for Confirmed findings
Copy link to “Notification for Confirmed findings”We've added a new filter: get notified if a scan result has confirmed findings.
September 2022
Screenshots in Password Auditor findings
Copy link to “Screenshots in Password Auditor findings”Password Auditor will take a screenshot of the authenticated session if weak credentials are found for HTTP web forms.
Exploit for CVE-2017-0144 - Eternalblue (RCE in Remote Desktop Protocol/Services)
Copy link to “Exploit for CVE-2017-0144 - Eternalblue (RCE in Remote Desktop Protocol/Services)”Sniper can now exploit a Remote Code Execution vulnerability affecting Remote Desktop Protocol/Services (CVE-2017-0144).
Detection for CVE-2022-1040 (RCE in Sophos)
Copy link to “Detection for CVE-2022-1040 (RCE in Sophos)”Network Scanner can now detect if a Sophos server is vulnerable to a Remote Code Execution vulnerability (CVE-2022-1040).
Automatically discover login URLs in Password Auditor
Copy link to “Automatically discover login URLs in Password Auditor”Password Auditor will try to automatically find the login page and attempt web form authentication if there is no login form at the target URL.
Detection for CVE-2022-2884 (RCE in Gitlab CE/EE)
Copy link to “Detection for CVE-2022-2884 (RCE in Gitlab CE/EE)”Network Scanner can now detect if a Gitlab Comunity/Enterprise server is vulnerable to a Remote Code Execution vulnerability (CVE-2022-2884).
Exploit for CVE-2022-35405 (RCE in ManageEngine Password Manager Pro and PAM360)
Copy link to “Exploit for CVE-2022-35405 (RCE in ManageEngine Password Manager Pro and PAM360)”Sniper can now exploit a Remote Code Execution vulnerability affecting ManageEngine, Password Manager Pro and ManageEngine PAM360 (CVE-2022-35405).
Exploit for CVE-2018-1000861, CVE-2019-1003005, CVE-2019-1003029 (RCE in Jenkins)
Copy link to “Exploit for CVE-2018-1000861, CVE-2019-1003005, CVE-2019-1003029 (RCE in Jenkins)”Sniper can now exploit a Remote Code Execution vulnerability affecting the Jenkins Script Security Plugin (CVE-2018-1000861, CVE-2019-1003005, CVE-2019-1003029).
Authenticated MySQL Sniper scans
Copy link to “Authenticated MySQL Sniper scans”Sniper can now authenticate to the target through MySQL using the provided credentials.
Find Subdomains is now Subdomain Finder
Copy link to “Find Subdomains is now Subdomain Finder”We changed the name of Find Subdomains to Subdomain Finder for better name consistency.
Detection for CVE-2019-0708 (BlueKeep - RCE in Microsoft Windows)
Copy link to “Detection for CVE-2019-0708 (BlueKeep - RCE in Microsoft Windows)”Network Scanner can now detect if a Microsoft Windows server is vulnerable to a Remote Code Execution vulnerability affecting RDP (CVE-2019-0708).
Exploit for CVE-2020-29453 (Arbitrary File Read in Jira)
Copy link to “Exploit for CVE-2020-29453 (Arbitrary File Read in Jira)”Sniper can now exploit a Pre-Authorization Arbitrary File Read vulnerability affecting Atlassian Jira (CVE-2020-29453).
Exploit for CVE-2022-31656 (Arbitrary File Read in VMware Workspace One)
Copy link to “Exploit for CVE-2022-31656 (Arbitrary File Read in VMware Workspace One)”Sniper can now exploit a Pre-Authorization Arbitrary File Read vulnerability affecting a VMware Workspace One server (CVE-2022-31656).
Detection for CVE-2022-24681 (XSS in Zoho ManageEngine)
Copy link to “Detection for CVE-2022-24681 (XSS in Zoho ManageEngine)”Network Scanner can now detect if a Zoho ManageEngine ADSelfService Plus server is vulnerable to Stored Cross-Site Scripting (CVE-2022-24681).