Changelog

Two new modules in the Website Vulnerability Scanner:

• Detection for misconfigured CSP Headers - identifies misconfigured content-security-policy headers on your website, enabling you to control resource loading and their allowed URLs.

• Enumerable Parameter Detector - explores possible enumerable parameters in your website. Some findings might reveal insecure direct object references after manual examination.

Until a few days ago, our product updates were a bit hidden from view, which made it harder for you to find out about them and actually use them.

So we added two new sections to your dashboard:

• What’s new - that brings product updates (text and video) and fresh pentesting guides

• Help - which makes it easier to dip into how-to’s, video tutorials, and FAQs

We noticed some of our customers needed an easier way to start scans from the (obviously named) Scans section, so we added it!

The New scan button makes it easy to jump into action the moment you know where you want to dig deeper.

Our Website Vulnerability Scanner gets stronger with each monthly update!

We’ve integrated the fingerprinting capabilities from Nuclei into our proprietary tool - and it’s just the kickoff!

Soon, we’ll start incorporating many more templates. Until then, the 40+ vulnerability checks our Website Scanner runs can surely keep you - and your team - focused and making progress.

We’ve also integrated a bunch of new Nuclei category templates on top of the configured ones our Network Scanner is already using (CVE, CNVD, SSL, network, WAF, DNS).

New ones include: default-logins, exposed-panels, exposures, honeypot, IoT, miscellaneous, misconfiguration, takeovers, and vulnerabilities.

Want to refresh your knowledge of what our Network Vulnerability Scanner can do? We just updated its public page:

Sniper can exploit a Remote Code Execution vulnerability found in Ivanti Connect Secure (CVE-2024-21887).

If you (and your team) use Microsoft Teams, set up this integration to get custom notifications for your scan results.

You can also configure different channels for specific notifications, making sure everyone gets alerts about findings that are relevant for them.

Network Scanner detects if CVE-2022-1471 (CVSSv3 10), a Remote Code Execution in SnakeYAML library - Atlassian Confluence, impacts your targets.

Network Scanner detects if CVE-2023-46805 (CVSSv3 8.2), an authentication Bypass in Ivanti Connect Secure, affects your targets.

And one more thing: we added a method to detect if the Website Scanner spider finds an OpenAPI file. When it does, you can dig deeper with the API Scanner in just one click, right from your finding.

By the way, we love to see customers truly make the most of our tools:

We had a tool to scan our websites and endpoints automatically; the reports were not so good, and each additional URL was charged additionally (this doesn't scale in a micro-services architecture).

Pentest-Tools.com solved all our problems; you can scan up to 1000 targets, the reports are so professional, and you can choose from dozens of different tools to analyze all aspects of an enterprise architecture.

We've also introduced a new Session Fixation Detector to help you identify session hijacking risks. Using the mitigation recommendations will help you prevent unauthorized access to user sessions and sensitive data.

Here’s a preview of what the finding looks like:

Sniper can exploit a Remote Code Execution vulnerability found in Apache ActiveMQ (CVE-2023-46604).

Sniper can exploit a Remote Code Execution vulnerability found in SysAid (CVE-2023-47246).

You can now check the status of your VPN Agents in the VPN Profiles section (under Settings).

We update their status in real-time, which makes it easier for you to check if your Agents are still up and running before starting scans against your internal infrastructure.

We've implemented Input Reflected in DOM to enhance protection against XSS attacks, ensuring coverage of more vulnerabilities lying in the DOM. It is already implemented in the XSS detector so if you select the XSS detector you are covered.

Here’s what it’ll look like in your report:

Service detection is now enabled by default in Light mode for Port Scanner.

We've combined TCP Port Scanner and UDP Port scanner into a single tool called Port Scanner. A protocol parameter was added to the scan config to choose between TCP and UDP.

We've changed our URL Fuzzer to support 3 running modes (light, deep, and custom) that allow you to scan targets with a predefined configuration.

Sniper can exploit an authenticated RCE vulnerability found in Cisco IOS XE (CVE-2023-20273), based on an Authentication Bypass vulnerability (CVE-2023-20198).