Detection for CVE-2021-44228 (Log4shell in Apache Tomcat)
Copy link to “Detection for CVE-2021-44228 (Log4shell in Apache Tomcat)”The Network Scanner can now detect if an Apache Tomcat instance is vulnerable to Log4Shell (CVE-2021-44228).
Changelog
These are the latest updates we've made to our platform. If you have any questions about any of the updates you see below, please feel free to contact us!
Date
January 2022
Exploit for CVE-2020-17409/27866 (Credential Disclosure in Netgear)
Copy link to “Exploit for CVE-2020-17409/27866 (Credential Disclosure in Netgear)”Sniper can now exploit an RCE in the Netgear routers (CVE-2020-17409, CVE-2020-27866).
Exploit for CVE-2021-44228 (Log4shell - RCE in Log4j)
Copy link to “Exploit for CVE-2021-44228 (Log4shell - RCE in Log4j)”Sniper can now exploit an RCE in the Log4j logging library (CVE-2021-44228).
Network Scanner in Robots
Copy link to “Network Scanner in Robots”Added the possibility to chain the Network Scanner within the Pentest Robots.
December 2021
Detection for CVE-2021-44228 in Network Scanner (Log4shell - RCE in Log4j)
Copy link to “Detection for CVE-2021-44228 in Network Scanner (Log4shell - RCE in Log4j)”The Network Scanner can now detect if a server is vulnerable to a RCE vulnerability in the Log4j logging library (CVE-2021-44228).
Detection for CVE-2021-44228 in Website Scanner (Log4shell - RCE in Log4j)
Copy link to “Detection for CVE-2021-44228 in Website Scanner (Log4shell - RCE in Log4j)”The Website Scanner can now detect the Apache Log4j vulnerability (CVE-2021-44228).
Detection for Ruby Code Injection in Website Scanner
Copy link to “Detection for Ruby Code Injection in Website Scanner”We added detection for Ruby Code injection in The Deep Website Scanner.
Detection for Broken Authentication in Website Scanner
Copy link to “Detection for Broken Authentication in Website Scanner”Added detection for Broken Authentication while running an authenticated website scan in the Website Scanner.
Exploit for CVE-2021-26295 (RCE in Apache OFBiz)
Copy link to “Exploit for CVE-2021-26295 (RCE in Apache OFBiz)”Sniper can now exploit an RCE in Apache OFBiz (CVE-2021-26295).
New target description column
Copy link to “New target description column”We added the possibility to see the target description in the All Scans page and the scheduler page. To enable it, check
View settings -> Show target description.Redis support for Password Auditor
Copy link to “Redis support for Password Auditor”Password Auditor can now discover weak credentials for the Redis service.
Detection for CVE-2021-41349 (XSS in Microsoft Exchange)
Copy link to “Detection for CVE-2021-41349 (XSS in Microsoft Exchange)”The Network Scanner can now detect if a Microsoft Exchange server is vulnerable to Pre-Auth POST Based Reflected XSS (CVE-2021-41349).
Detection for Perl Code Injection in Website Scanner
Copy link to “Detection for Perl Code Injection in Website Scanner”We added detection for Perl Code injection in The Deep Website Scanner.
Exploit for CVE-2017-12617 (RCE in Apache Tomcat)
Copy link to “Exploit for CVE-2017-12617 (RCE in Apache Tomcat)”Sniper can now exploit an RCE in the Apache Tomcat HTTP Server (CVE-2017-12617).
Exploit for CVE-2019-10149 (RCE in Exim)
Copy link to “Exploit for CVE-2019-10149 (RCE in Exim)”Sniper can now exploit an RCE in Exim mail server (CVE-2019-10149).
Exploit for CVE-2021-3129 (RCE in Laravel)
Copy link to “Exploit for CVE-2021-3129 (RCE in Laravel)”Sniper can now exploit an RCE in Laravel PHP framework (CVE-2021-3129).
November 2021
Detection for Python Code Injection in Website Scanner
Copy link to “Detection for Python Code Injection in Website Scanner”We added detection for Python Code injection in The Deep Website Scanner.
Exploit for CVE-2019-0230 (RCE in Apache Struts)
Copy link to “Exploit for CVE-2019-0230 (RCE in Apache Struts)”Sniper can now exploit an RCE in the Apache Struts 2 Framework (CVE-2019-0230).
Password Auditor produces findings
Copy link to “Password Auditor produces findings”The Password Auditor now produces findings. Check the Findings page, where you can modify them and create editable reports.
Sniper mode in the Network Scanner
Copy link to “Sniper mode in the Network Scanner”We have a new scan option for the Network Scanner - Sniper scan, a light scan that allows you to check only for the highly exploitable vulnerabilities in a non-intrusive way.