Scan APIs via Postman collections
Copy link to “Scan APIs via Postman collections”API Scanner: You can now scan APIs by uploading Postman collections. We convert the URLs from the Postman into a swagger file and scan it accordingly.
Changelog
These are the latest updates we've made to our platform. If you have any questions about any of the updates you see below, please feel free to contact us!
Date
September 2023
Exploit for CVE-2023-1698 (RCE in WAGO)
Copy link to “Exploit for CVE-2023-1698 (RCE in WAGO)”Sniper can exploit a RCE vulnerability discovered in Wago (CVE-2023-1698).
Exploit for CVE-2023-29300 (RCE in Adobe ColdFusion)
Copy link to “Exploit for CVE-2023-29300 (RCE in Adobe ColdFusion)”Sniper can exploit this RCE vulnerability found in Adobe ColdFusion (CVE-2023-29300).
August 2023
Pentest-Tools.com is officially listed on the AWS Marketplace
Copy link to “Pentest-Tools.com is officially listed on the AWS Marketplace”We are happy to announce that Pentest-Tools.com is officially listed on the AWS Marketplace. This listing meets security and compliance standards, allowing you to simplify your purchase flow through your existing AWS account.
Exploit for CVE-2023-25826 (RCE in OpenTSDB)
Copy link to “Exploit for CVE-2023-25826 (RCE in OpenTSDB)”Sniper can exploit a RCE vulnerability discovered in OpenTSDB (CVE-2023-25826).
Exploit for CVE-2023-38646 (RCE in Metabase)
Copy link to “Exploit for CVE-2023-38646 (RCE in Metabase)”Sniper can exploit a RCE vulnerability discovered in Metabase (CVE-2023-38646).
New Handlers page
Copy link to “New Handlers page”Our tools that accept requests (XSS Exploiter, HTTP Request Logger, and Sniper Client-side attacks) are now structured and placed into a single page called Handlers.
Nuclei templates improvements
Copy link to “Nuclei templates improvements”Network Scanner: The Pentest-Tools.com research team contributes to the official Nuclei templates by improving and fixing false positives. We are now ranked among the top 75 contributors on the official repository.
Scan options for our Cloud Scanner
Copy link to “Scan options for our Cloud Scanner”You can now select if you want to detect the cloud provider and/or detect cloud vulnerabilities & misconfigurations in the Cloud Scanner.
New findings page
Copy link to “New findings page”The Findings page got a fresh look! But that’s not all. With improved filtering and performance, it’s now faster than ever to manage your findings and find exactly what you are looking for. Moreover, the new Finding editor creates an improved writing experience and a more reliable output. Give it a try by creating a manual finding.
Automatic daily update for Nuclei templates configured in Network Scanner
Copy link to “Automatic daily update for Nuclei templates configured in Network Scanner”Nuclei templates now receive automatic updates daily, ensuring the scanner Nuclei detections are always up-to-date.
Detection for CVE-2023-3519 (RCE in Citrix ADC & Gateway)
Copy link to “Detection for CVE-2023-3519 (RCE in Citrix ADC & Gateway)”Network Scanner can now detect if CVE-2023-3519 (Citrix ADC & Gateway) affect your targets.
Exploit for CVE-2023-33246 (RCE in Apache RocketMQ)
Copy link to “Exploit for CVE-2023-33246 (RCE in Apache RocketMQ)”Sniper can exploit a RCE vulnerability discovered in Apache RocketMQ (CVE-2023-33246).
Exploit for CVE-2023-34960 (RCE in Chamilo)
Copy link to “Exploit for CVE-2023-34960 (RCE in Chamilo)”Sniper can exploit a RCE vulnerability discovered in Chamilo (CVE-2023-34960).
Exploit for CVE-2023-35078 (Unauthenticated API Access in Ivanti Endpoint Manager Mobile)
Copy link to “Exploit for CVE-2023-35078 (Unauthenticated API Access in Ivanti Endpoint Manager Mobile)”Sniper can exploit an Unauthenticated API Access vulnerability discovered in Ivanti Endpoint Manager Mobile (CVE-2023-35078).
Pentest Ground: New free resource to test your scanners and skills
Copy link to “Pentest Ground: New free resource to test your scanners and skills”Pentest Ground is a free playground with deliberately vulnerable web applications and network services. You can use it to benchmark your tools and learn new offensive security techniques.
July 2023
Detection for CVE-2023-35078 (Ivanti EPMM) and CVE-2023-38646 (Metabase)
Copy link to “Detection for CVE-2023-35078 (Ivanti EPMM) and CVE-2023-38646 (Metabase)”Network Scanner can now detect if CVE-2023-35078 (Ivanti EPMM) and CVE-2023-35078 (Ivanti EPMM) affect your targets.
HTTP request/response in Nuclei evidence
Copy link to “HTTP request/response in Nuclei evidence”The HTTP request/response from Network Scanner is now displayed when a finding is generated by the Nuclei scanning engine. This will add more details to the finding and will help validate the generated result.
More GCP tests for the Cloud Vulnerability Scanner
Copy link to “More GCP tests for the Cloud Vulnerability Scanner”The Cloud Vulnerability Scanner can now detect multiple misconfigurations in GCP using a dedicated Google account set by Pentest-Tools.
Exploit for CVE-2023-3224 (RCE in Nuxt)
Copy link to “Exploit for CVE-2023-3224 (RCE in Nuxt)”Sniper can exploit a RCE vulnerability discovered in Nuxt (CVE-2023-3224).