Delete HTTP Request Loggers
Copy link to “Delete HTTP Request Loggers”We added the possibility to delete existing HTTP Request Loggers.
Changelog
These are the latest updates we've made to our platform. If you have any questions about any of the updates you see below, please feel free to contact us!
Date
November 2021
Exploit for CVE-2017-9791 (RCE in Apache Struts)
Copy link to “Exploit for CVE-2017-9791 (RCE in Apache Struts)”Sniper can now exploit an RCE in Apache Struts (CVE-2017-9791).
Improved scan result for Sniper
Copy link to “Improved scan result for Sniper”We added a new and more interactive interface for the Sniper scan result.
Exploit for CVE-2014-6271 (ShellShock - RCE in Apache server)
Copy link to “Exploit for CVE-2014-6271 (ShellShock - RCE in Apache server)”Sniper can now exploit an RCE in Apache server (CVE-2014-6271).
Exploit for CVE-2021-22205 (RCE in Gitlab)
Copy link to “Exploit for CVE-2021-22205 (RCE in Gitlab)”Sniper can now exploit an RCE in the Gitlab CE/EE server (CVE-2021-22205).
Scheduled Robots
Copy link to “Scheduled Robots”The Pentest Robots can now be scheduled to scan recurrently from the targets page.
Detection for CVE-2020-11853/4/ (Authentication Bypass in Micro Focus OBM)
Copy link to “Detection for CVE-2020-11853/4/ (Authentication Bypass in Micro Focus OBM)”The Network Scanner can now detect if the Micro Focus OBM (Operations Bridge Manager) is vulnerable to Authentication Bypass (CVE-2020-11853 & CVE-2020-11854).
Exploit for CVE-2019-19781 (RCE in Citrix ADC and Citrix Gateway)
Copy link to “Exploit for CVE-2019-19781 (RCE in Citrix ADC and Citrix Gateway)”Sniper can now exploit an RCE in Citrix ADC (Application Delivery Controller) and Citrix Gateway (CVE-2021-3223).
Exploit for CVE-2020-1938 (Ghostcat – LFI in Apache Tomcat)
Copy link to “Exploit for CVE-2020-1938 (Ghostcat – LFI in Apache Tomcat)”Sniper can now exploit a Local FIle Inclusion in the AJP connector in Apache Tomcat (CVE-2020-1938).
October 2021
Detection for CVE-2021-40539 (RCE in Zoho ManageEngine)
Copy link to “Detection for CVE-2021-40539 (RCE in Zoho ManageEngine)”The Network Scanner can now detect if the Zoho ManageEngine ADSelfService Plus is vulnerable to Remote Code Execution (CVE-2021-40539).
Exploit for CVE-2021-3223 (LFI in Node-Red Dashboard)
Copy link to “Exploit for CVE-2021-3223 (LFI in Node-Red Dashboard)”Sniper can now exploit a Local File Inclusion in the Node-Red Dashboard through a Path Traversal vulnerability (CVE-2021-3223).
Detection for PHP Code Injection in Website Scanner
Copy link to “Detection for PHP Code Injection in Website Scanner”We added detection for PHP Code Injection in the Deep Website Scanner.
Exploit for CVE-2021-42013 (Apache Path Traversal)
Copy link to “Exploit for CVE-2021-42013 (Apache Path Traversal)”Sniper can now exploit an Arbitrary File Read and a Remote Code Execution through a Path Traversal vulnerability in Apache (CVE-2021-42013).
New services supported in Password Auditor
Copy link to “New services supported in Password Auditor”Password Auditor can now discover weak credentials for the following services: Postgresql, Telnet, and VNC.
Exploit for CVE-2021-41773 (Apache Path Traversal)
Copy link to “Exploit for CVE-2021-41773 (Apache Path Traversal)”Sniper can now exploit an Arbitrary File Read and a Remote Code Execution through a Path Traversal vulnerability in Apache (CVE-2021-41773).
Exploit for CVE-2020-3452 (LFI in Cisco ASA and Cisco FTD)
Copy link to “Exploit for CVE-2020-3452 (LFI in Cisco ASA and Cisco FTD)”Sniper can now exploit a Local File Inclusion in the Cisco Adaptive Security Appliance or the Cisco Firepower Threat Defense (CVE-2020-3187).
Exploit for CVE-2021-21985 (RCE in VMware vCenter)
Copy link to “Exploit for CVE-2021-21985 (RCE in VMware vCenter)”The Network Scanner can now exploit an RCE in VMware vCenter (CVE-2021-21985).
September 2021
Exploit for CVE-2020-25223 (RCE in Sophos SG UTM)
Copy link to “Exploit for CVE-2020-25223 (RCE in Sophos SG UTM)”Sniper can now exploit an RCE in the WebAdmin of Sophos SG Unified Threat Management (CVE-2020-25223).
Detection for CVE-2020-3187 (LFI in Cisco ASA and Cisco FTD)
Copy link to “Detection for CVE-2020-3187 (LFI in Cisco ASA and Cisco FTD)”The Network Scanner can now detect if the Cisco Adaptive Security Appliance or the Cisco Firepower Threat Defense is vulnerable to Local File Inclusion (CVE-2020-3187).
Detection for CVE-2021-22005 (RCE in VMware vCenter)
Copy link to “Detection for CVE-2021-22005 (RCE in VMware vCenter)”The Network Scanner can now detect RCE in VMWare vCenter (CVE-2021-22005).