Exploit for CVE-2019-6340 (RCE in Drupal Core)
Copy link to “Exploit for CVE-2019-6340 (RCE in Drupal Core)”Sniper can now exploit a Remote Code Execution vulnerability affecting Drupal Core (CVE-2019-6340).
Changelog
These are the latest updates we've made to our platform. If you have any questions about any of the updates you see below, please feel free to contact us!
Date
July 2022
June 2022
New dorks in Google Hacking
Copy link to “New dorks in Google Hacking”Increased the number of dorks in Google Hacking: find subdomains, search in wayback machine and more.
Exploit for CVE-2022-30525 (RCE in Zyxel Firewall)
Copy link to “Exploit for CVE-2022-30525 (RCE in Zyxel Firewall)”Sniper can now exploit a OS command injection vulnerability in the CGI program of Zyxel Firewall (CVE-2022-30525).
AWS Docker Agent
Copy link to “AWS Docker Agent”You can now deploy our VPN Agent in any AWS Cloud Infrastructure and start scanning your assets from within the network.
VPN Docker Agent
Copy link to “VPN Docker Agent”Deploy the VPN Agent much faster, on any platforms, including Windows, Linux, or even Apple M1, using Docker technology.
Exploit for CVE-2022-26352 (RCE in DotCMS)
Copy link to “Exploit for CVE-2022-26352 (RCE in DotCMS)”Sniper can now exploit a Remote Code Execution vulnerability affecting DotCMS systems (CVE-2022-26352).
Authenticated SMB Sniper scans
Copy link to “Authenticated SMB Sniper scans”Sniper can now authenticate to the target through the SMB protocol using the provided credentials.
Exploit for CVE-2022-26134 (RCE in Confluence)
Copy link to “Exploit for CVE-2022-26134 (RCE in Confluence)”Sniper can now exploit a Remote Code Execution vulnerability affecting Atlassian Confluence server instances (CVE-2022-26134).
May 2022
Network hosts visual summary in Sniper
Copy link to “Network hosts visual summary in Sniper”Sniper can now create a visual summary for the network hosts that are currently connected on the target and also the adjacent hosts from nearby subnets.
Detection for CVE-2022-0540 (Authentication Bypass in Jira)
Copy link to “Detection for CVE-2022-0540 (Authentication Bypass in Jira)”The Network Scanner can now detect if a Jira Seraph (the core authentication mechanism of Jira) instance is vulnerable to authentication bypass (CVE-2022-0540).
Exploit for CVE-2022-21371 (LFI in Oracle WebLogic)
Copy link to “Exploit for CVE-2022-21371 (LFI in Oracle WebLogic)”Sniper can now exploit a Local File Inclusion vulnerability inside the Console component of Oracle WebLogic Server (CVE-2022-21371).
Slack integration
Copy link to “Slack integration”Now you can send Pentest-Tools.com notifications to your Slack workspace.
Move data when deleting a workspace
Copy link to “Move data when deleting a workspace”When deleting a Workspace, you will have the option to move the existing targets (and the associated data e.g. scans) to the default workspace or delete everything.
Exploit for CVE-2022-1388 (RCE in F5 BIG-IP)
Copy link to “Exploit for CVE-2022-1388 (RCE in F5 BIG-IP)”Sniper can now exploit an RCE vulnerability in F5 BIG-IP (CVE-2022-1388).
Detection for CVE-2019-11581 (RCE in Jira)
Copy link to “Detection for CVE-2019-11581 (RCE in Jira)”The Network Scanner can now detect if a Jira Server or Data Center instance is vulnerable to a server-side template injection vulnerability (CVE-2019-11581).
Exploit for CVE-2021-44077 (RCE in Zoho ManageEngine)
Copy link to “Exploit for CVE-2021-44077 (RCE in Zoho ManageEngine)”Sniper can now exploit an unauthenticated RCE vulnerability in Zoho ManageEngine (CVE-2021-44077).
Exploit for CVE-2022-29464 (RCE in WSO2)
Copy link to “Exploit for CVE-2022-29464 (RCE in WSO2)”Sniper can now exploit an unrestricted file upload vulnerability in certain WSO2 products (CVE-2022-29464).
Added API support for Sniper
Copy link to “Added API support for Sniper”Sniper can now be accessed via the API.
April 2022
Exploit for CVE-2018-15961 (RCE in Adobe ColdFusion)
Copy link to “Exploit for CVE-2018-15961 (RCE in Adobe ColdFusion)”Sniper can now exploit an RCE vulnerability in Adobe ColdFusion (CVE-2018-15961).
Exploit for CVE-2018-7600 (RCE in Drupal)
Copy link to “Exploit for CVE-2018-7600 (RCE in Drupal)”Sniper can now exploit an RCE vulnerability in the Drupal server (CVE-2018-7600).