Exploit for CVE-2019-11510 (LFI in Pulse Secure)
Copy link to “Exploit for CVE-2019-11510 (LFI in Pulse Secure)”Sniper can now exploit a Local File Inclusion in Pulse Connect Secure (CVE-2019-11510).
Changelog
These are the latest updates we've made to our platform. If you have any questions about any of the updates you see below, please feel free to contact us!
Date
September 2021
More screenshots in the Deep Website Scanner
Copy link to “More screenshots in the Deep Website Scanner”The Deep Website Scanner will now generate more screenshots to simplify the reporting flow.
Clone Robot
Copy link to “Clone Robot”We added the possibility to clone an existing Pentest Robot.
Confirmed tag for Website Scanner findings
Copy link to “Confirmed tag for Website Scanner findings”Website Scanner findings that have been automatically validated by our scanner will be marked with the Confirmed tag.
Exploit for CVE-2021-38647 (RCE in Multiple Azure Linux Deployments)
Copy link to “Exploit for CVE-2021-38647 (RCE in Multiple Azure Linux Deployments)”Sniper can now exploit an RCE in the Open Management Infrastructure (OMI) agent that is preconfigured in the Linux VM deployed on Azure (CVE-2021-38647).
Exploit for CVE-2021-21972 (RCE in VMware vCenter)
Copy link to “Exploit for CVE-2021-21972 (RCE in VMware vCenter)”Sniper can now exploit an Unauthenticated RCE in VMware vCenter (CVE-2021-21972).
Exploit for CVE-2021-26084 (RCE in Atlassian Confluence)
Copy link to “Exploit for CVE-2021-26084 (RCE in Atlassian Confluence)”Sniper can now exploit an RCE in Atlassian Confluence (CVE-2021-26084).
Detection for CVE-2021-21975 (vRealize Operations Manager API SSRF)
Copy link to “Detection for CVE-2021-21975 (vRealize Operations Manager API SSRF)”The Network Scanner can now detect SSRF in vRealize Operations Manager API (CVE-2021-21975).
Detection for CVE-2021-24146 (Modern Events Calendar Lite)
Copy link to “Detection for CVE-2021-24146 (Modern Events Calendar Lite)”The Network Scanner can now detect if Modern Events Calendar Lite is vulnerable to an Unauthenticated Events Export (CVE-2021-24146).
August 2021
Custom limit for Website Scanner requests
Copy link to “Custom limit for Website Scanner requests”Now you can limit the maximum requests (per second) for the Website Scanner. Check the Engine Options → Limits → Requests per second.
Detection for CVE-2021-21985 (VMware vCenter RCE)
Copy link to “Detection for CVE-2021-21985 (VMware vCenter RCE)”The Network Scanner can now detect RCE in VMware vCenter (CVE-2021-21985).
Detection for CVE-2021-31195 (ProxyOracle)
Copy link to “Detection for CVE-2021-31195 (ProxyOracle)”The Network Scanner can now detect XSS in the ProxyOracle exploit (CVE-2021-31195).
Manually reset the API Key
Copy link to “Manually reset the API Key”We added the possibility to manually reset the API key.
Recursion in URL Fuzzer
Copy link to “Recursion in URL Fuzzer”The URL Fuzzer can now do recursive searches by running automatically inside all the directories already discovered.
More enumeration options in WordPress Scanner
Copy link to “More enumeration options in WordPress Scanner”The WordPress Scanner can now search for config backups, database exports, or TimThumbs.
Add targets as CIDR
Copy link to “Add targets as CIDR”Added the possibility to add targets using the CIDR notation (eg. 192.168.1.0/24).
Detection for CVE-2018-13379 (FortiOS path traversal)
Copy link to “Detection for CVE-2018-13379 (FortiOS path traversal)”The Network Scanner can now detect CVE-2018-13379 – path traversal in FortiGate SSL VPN appliance.
Added API support for HTTP Logger
Copy link to “Added API support for HTTP Logger”The HTTP Request Logger tool can now be accessed via the API.
July 2021
Detection for CVE-2021-21315 (Node.js Systeminformation RCE)
Copy link to “Detection for CVE-2021-21315 (Node.js Systeminformation RCE)”The Network Scanner can now detect Node.js Systeminformation Command Injection (CVE-2021-21315).
Detection for CVE-2021-28480 (Microsoft Exchange RCE)
Copy link to “Detection for CVE-2021-28480 (Microsoft Exchange RCE)”The Network Scanner can now detect Remote Code Execution in Microsoft Exchange Server (CVE-2021-28480).