These are the latest updates we've made to our platform. If you have any questions about any of the updates you see below, please feel free to contact us!
All OpenVAS NVTs that can be detected with Network Scanner are now displayed on our Vulnerability & Exploit database, along with Sniper & Nuclei detections
We tweaked the spider results table from the Website Scanner so you can focus more on the things that matter the most: the url, the method, the query and body parameters. So, we removed the listing of headers and cookies and made the table more dynamic.
We've added the confirmed tag for findings generated by Sniper & Nuclei scanning engines.
Sniper can exploit another RCE vulnerability found in F5 BIG-IP (CVE-2023-46747).
Website Scanner: Fixed a bug in our logout detection mechanism that caused the Spider to sign us out of the session while crawling.
We came up with a way to show output from WPScan in real-time. This means you are not stuck with a scan running for 4 hours and get the findings as soon as we detect them.
We've just launched our Free license. Use our light tools to do quick assessments, export simple reports with up to 2 parallel scans.
Subdomain Finder: We improved our logic for parsing DNS responses. This previously resulted in incorrectly marking domain names as unresolved.
We fixed a bug in the Network Scanner that caused some aborted scans when all the open ports were tcpwrapped, although our scanning engines don't scan for this service.
We created an automatic CVE filtering mechanism for duplicated CVEs. For example, if the Sniper or the Nuclei engines find a CVE, only the Sniper finding will be displayed in the report. We'll show them based on prioritization (Sniper > Nuclei > OpenVAS).
All network tools will display only the open ports found (we remove the filtered and closed ones from the results).
Network Scanner detects if CVE-2023-44487 (DOS in HTTP/2 - Rapid Reset) affects your targets.
DNS Zone Transfer is now called DNS Server Scanner and it generates findings for DNS Zone Transfer Information Disclosure vulnerability (AXFR).
Sniper can exploit a File Read vulnerability found in SonicWall (CVE-2023-0126).
Sniper can exploit an Authentication Bypass vulnerability found in Cisco IOS XE (CVE-2023-20198).
Sniper can exploit an Information Disclosure vulnerability found in Citrix (CVE-2023-4966 - Citrix Bleed).
Website Scanner: Fixed another bug in the logic driving the headless browser that crashed the page and prevented us from detecting new crawling targets.
Sniper can exploit another RCE vulnerability found in Apache Cassandra (CVE-2021-44521).
Sniper can exploit an Authentication Bypass vulnerability in Atlassian Confluence (CVE-2023-22515).
Sniper can exploit a RCE vulnerability in Apache Kafka (CVE-2023-25194)
